github.com/anchore/syft@v1.4.2-0.20240516191711-1bec1fc5d397/syft/pkg/cataloger/java/test-fixtures (about) glob-paths graalvm-sbom gradle jar-metadata java-builds manifest maven-xml-responses pom