https://github.com/anchore/syft c200896a9644f9b6bd4bc3785c848276c33bb53c