https://github.com/anchore/syft c5dca001e267d2a91ff82e53ca72535ceef6af02