syft: CLI tool and library for generating a Software Bill of Materials from container images and filesystems