https://github.com/anchore/syft 1e31356c49bf2c30fd80c833482e1fbe4133ff83