github.com/google/osv-scalibr@v0.4.1/artifact/image (about) file.go image.go layerscanning require symlink tar testfixtures unpack whiteout