github.com/google/osv-scalibr@v0.4.1/artifact/image/layerscanning/trace/testdata (about) populatelayers.yml