https://github.com/anchore/syft e1e489a2849c8432781a7cb58b257fa935efa1cf