https://github.com/anchore/syft ac94bf530c7b1e6ee5df1ed0f9f6454fca8bc918