github.com/anchore/syft@v1.4.2-0.20240516191711-1bec1fc5d397/syft/format/spdxjson/test-fixtures/spdx (about) alpine-3.10.syft.spdx.json alpine-3.10.vendor.spdx.json bad example7-bin.spdx.json example7-go-module.spdx.json example7-golang.spdx.json example7-third-party-modules.spdx.json