github.com/kastenhq/syft@v0.0.0-20230821225854-0710af25cdbe/syft/pkg/cataloger/java/test-fixtures (about) glob-paths graalvm-sbom gradle java-builds manifest pom