**What happened**: see [parent issue](https://github.com/anchore/sbom-action/issues/547), but fix needed in Syft **What you expected to happen**: **Steps to reproduce the issue**: **Anything else we need to know?**: **Environment**: - Output of `syft version`: - OS (e.g: `cat /etc/os-release` or similar):