https://github.com/anchore/grype b9cf0e5cf89b47dc2d34315855d68542e817657c