https://github.com/anchore/syft 2642a3616170ccbda9d8c8cb4f4a6b0fd5c63da9