github.com/anchore/syft@v1.38.2/syft/pkg/cataloger/rust/test-fixtures/image-audit (about) Cargo.lock Cargo.toml Dockerfile src