https://github.com/anchore/syft bc1edb9c8a2fb4824bfdcac6147edc2bbf47aaf6