github.com/lineaje-labs/syft@v0.98.1-0.20231227153149-9e393f60ff1b/syft (about) artifact cataloging cpe event file format internal lib.go lib_test.go license linux pkg sbom source testutil