https://github.com/anchore/syft a4b5dcd0df80f6a58c8610e25104647710c1da5d