2022-02-10T17:18:31-05:00 anchore syft [not provided] user-image-input sha256:2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368 package-1 1.0.1 MIT cpe:2.3:*:some:package:1:*:*:*:*:*:*:* a-purl-1 the-cataloger-1 python python PythonPackageMetadata /somefile-1.txt sha256:41e7295da66c405eb3a4df29188dcf80f622f9304d487033a86d4a22e3f01abe package-2 2.0.1 cpe:2.3:*:some:package:2:*:*:*:*:*:*:* a-purl-2 the-cataloger-2 deb DpkgMetadata /somefile-2.txt sha256:68a2c166dcb3acf6b7303e995ca1fe7d794bd3b5852a0b4048f9c96b796086aa debian 1.2.3 debian debian debian 1.2.3