github.com/anchore/syft@v1.38.2/syft/pkg/cataloger/java/test-fixtures/java-builds/example-sb-app (about) .gitignore pom.xml src