Today, Syft adds OS related info like arch, distro, os version for RPM packages only. But if a python is installed as an rpm then it is identified twice. Once as a rpm and second one as a language/binary package. OS info is available for RPM identification but not from language or binary package.
Since, information is already available from RPM, it would be useful if the OS information is carried over to non-rpm packages too.
Because of missing OS related info many false positive findings are getting reported or sometime false negatives too on the language based packages.