https://github.com/anchore/syft 754cebee6414c614acf03ee0f87abfcf6176e051