https://github.com/anchore/syft 03971ace43b877e371c13e3f786c1f6c3a4ec507