github.com/anchore/syft@v1.38.2/syft/format/spdxjson/test-fixtures/spdx (about) alpine-3.10.syft.spdx.json alpine-3.10.vendor.spdx.json bad example7-bin.spdx.json example7-go-module.spdx.json example7-golang.spdx.json example7-third-party-modules.spdx.json