https://github.com/anchore/syft dfcc07e5122217ca9e2fc75817c593356fc0c405