https://github.com/anchore/syft 88c81d33edc67b0b9636d0046417a9373ac8b74f