https://github.com/anchore/syft 41cbbe09b205e3b80e8a57d4f7a509b5f938557d