What would you like to be added:
/syft <AWS ACCOUNT>.dkr.ecr.us-east-1.amazonaws.com/foo:SNAPSHOT-26344cf5 should work without having to do extra steps to get an AWS authentication token.

Why is this needed:
We are using gitlab runner in EC2 and when we point to a snapshot in our ECR it fails to pull it due to being unauthenticated.

Additional context:
Similar to anchore/grype#774 but specifically for syft