https://github.com/anchore/syft 9b98785aab9346999a0b5e9f5e4b4e63a1b1916c