github.com/noqcks/syft@v0.0.0-20230920222752-a9e2c4e288e5/syft/pkg/cataloger/java/test-fixtures (about) glob-paths graalvm-sbom gradle java-builds manifest pom