https://github.com/anchore/syft 8f6bdde6662aa8050a71eadbdb7bd5a3b079a56d