github.com/anchore/syft@v1.38.2/syft/pkg/cataloger/internal/dependency (about) resolver.go resolver_test.go