https://github.com/anchore/syft a1bba36d514c3ff0f34635b9cdc9f07a92ea793b