https://github.com/anchore/syft 5f90d0371873faf5eb8f2e748909b32294be6263