github.com/anchore/syft@v1.38.2/syft/pkg/cataloger/java/test-fixtures/gradle (about) .gitignore build.gradle gradle.lockfile