We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype
We regularly write about what we're working on; here are some recent blog posts:
- Anchore and Bitnami: Bridging the Data Gap for Accurate Image Scanning (6 days ago)
- Neil Levine, Anchore | Chainguard Assemble 2026 (6 days ago)
- KubeCon EU 2026 (1 week ago)
- CypherCon 2026 (1 week ago)
- Anchore Enterprise 5.25: Unified Scanning Engine and First-Class Imported SBOMs (1 week ago)
We discuss our open source tools on Discourse. Here are some recent topics:
- PSA: No livestream(s) next week (Mar 26th, 2026) (1 week ago)
- Syft is not listing the packages under dev_dependencies section in package-lock.json (1 week ago)
- PSA: No livestream(s) this week (Mar 5th, 2026) (3 weeks ago)
- Recommended Workflow for Large-Scale Recurring SBOM Scans with Syft and Grype (1 month ago)
- Missing package identification from .zap packaging (1 month ago)
Pinned Loading
Repositories
Loading
Type
Select type
Language
All
Public
Sources
Forks
Archived
Mirrors
Templates
Select language
Sort
All
CMake
Dockerfile
Go
JavaScript
Makefile
Mustache
Python
Ruby
Shell
TypeScript
Select order
Last updated
Name
Stars
Showing 10 of 106 repositories
- ecs-inventory Public
Anchore ECS Inventory can poll ECS Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use
- syft Public
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
- nvd-data-overrides Public
- cve-data-enrichment Public
- vulnerability-data-tools Public
- security-identifiers Public
Contains the Anchore-allocated security identifiers and the relationships to upstream security data source identifiers
Top languages
Loading…
Most used topics
Loading…