https://github.com/anchore/syft 0cbd0cc70377d5b1b11b808fbbf9ddec450c68ee