https://github.com/anchore/syft dde5d349b1eef740c285255e6a9e3a8f5c9938e1