https://github.com/anchore/syft 04d288b3643f906255af88108f27712bb2be5b63