https://github.com/anchore/syft 791d1f955215f1dad383c9835e4d3c01267dc0f5