github.com/anchore/syft@v1.38.2/test/install/test-fixtures/assets/invalid/syft_1.5.0_linux_arm64.tar.gz

fake archive