https://github.com/anchore/syft 1c787f436fca20cbec4541f978ed2a634b880c97