github.com/noqcks/syft@v0.0.0-20230920222752-a9e2c4e288e5/syft/pkg/cataloger/sbom/test-fixtures/glob-paths (about) app.bom app.bom.json app.cdx app.cdx.json app.sbom app.sbom.json app.spdx app.spdx.json app.syft.json bom sbom