Skip to content
@anchore

Anchore, Inc.

�?Mastodon �?Twitter�? �?LinkedIn�? �?Anchore Community Discourse�?

Welcome 👋

We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype

Blog

We regularly write about what we're working on; here are some recent blog posts:

Community

We discuss our open source tools on Discourse. Here are some recent topics:

Pinned Loading

  1. syft syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    Go 6.1k 562

  2. grype grype Public

    A vulnerability scanner for container images and filesystems

    Go 8.6k 560

  3. scan-action scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    JavaScript 207 74

  4. sbom-action sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    TypeScript 164 29

  5. kubernetes-admission-controller kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    Go 64 27

  6. anchore-charts anchore-charts Public

    Helm charts for Anchore tools and services

    Python 47 71

Repositories

Showing 10 of 82 repositories
  • sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    anchore/sbom-action’s past year of commit activity
    TypeScript 164 Apache-2.0 29 11 (2 issues need help) 5 Updated Oct 7, 2024
  • harbor-scanner-adapter Public

    Harbor Scanner Adapter for Anchore Engine and Enterprise

    anchore/harbor-scanner-adapter’s past year of commit activity
    Go 38 Apache-2.0 17 17 2 Updated Oct 7, 2024
  • anchore/nvd-data-overrides’s past year of commit activity
    Python 45 CC0-1.0 5 1 0 Updated Oct 7, 2024
  • grype Public

    A vulnerability scanner for container images and filesystems

    anchore/grype’s past year of commit activity
    Go 8,596 Apache-2.0 560 255 17 Updated Oct 7, 2024
  • anchore/cve-data-enrichment’s past year of commit activity
    5 CC0-1.0 0 0 0 Updated Oct 7, 2024
  • anchore/vulnerability-data-tools’s past year of commit activity
    Python 12 Apache-2.0 3 3 0 Updated Oct 7, 2024
  • syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    anchore/syft’s past year of commit activity
    Go 6,080 Apache-2.0 562 358 34 Updated Oct 7, 2024
  • k8s-inventory Public

    Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

    anchore/k8s-inventory’s past year of commit activity
    Go 63 Apache-2.0 15 4 2 Updated Oct 7, 2024
  • yardstick Public

    Compare vulnerability scanners results (to make them better!)

    anchore/yardstick’s past year of commit activity
    Python 15 Apache-2.0 4 4 6 Updated Oct 7, 2024
  • quill Public

    Simple mac binary signing from any platform

    anchore/quill’s past year of commit activity
    Go 314 Apache-2.0 13 12 (1 issue needs help) 9 Updated Oct 7, 2024