https://github.com/anchore/syft da4b2df57640e03f273a2e7e9b04eca40555e139