Skip to content
@anchore

Anchore, Inc.

 Mastodon  Twitter   LinkedIn   Anchore Community Discourse 

Welcome 👋

We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype

Blog

We regularly write about what we're working on; here are some recent blog posts:

Community

We discuss our open source tools on Discourse. Here are some recent topics:

Pinned Loading

  1. syft syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    Go 8.3k 756

  2. grype grype Public

    A vulnerability scanner for container images and filesystems

    Go 11.4k 733

  3. scan-action scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    JavaScript 267 85

  4. sbom-action sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    TypeScript 218 34

  5. kubernetes-admission-controller kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    Go 65 28

  6. anchore-charts anchore-charts Public

    Helm charts for Anchore tools and services

    Python 53 73

Repositories

Showing 10 of 101 repositories
  • yardstick Public

    Compare vulnerability scanners results (to make them better!)

    anchore/yardstick’s past year of commit activity
    Python 27 Apache-2.0 7 6 2 Updated Jan 27, 2026
  • syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    anchore/syft’s past year of commit activity
    Go 8,280 Apache-2.0 756 469 50 Updated Jan 27, 2026
  • clio Public

    An easy way to bootstrap your application with batteries included.

    anchore/clio’s past year of commit activity
    Go 14 Apache-2.0 6 2 0 Updated Jan 27, 2026
  • grype-db Public
    anchore/grype-db’s past year of commit activity
    Go 59 Apache-2.0 31 12 15 Updated Jan 27, 2026
  • vunnel Public

    Tool for collecting vulnerability data from various sources (used to build the grype database)

    anchore/vunnel’s past year of commit activity
    Python 109 Apache-2.0 48 39 (1 issue needs help) 11 Updated Jan 27, 2026
  • grype Public

    A vulnerability scanner for container images and filesystems

    anchore/grype’s past year of commit activity
    Go 11,437 Apache-2.0 733 327 28 Updated Jan 27, 2026
  • anchore/nvd-data-overrides’s past year of commit activity
    Python 48 CC0-1.0 6 1 1 Updated Jan 27, 2026
  • anchore/cve-data-enrichment’s past year of commit activity
    Shell 16 CC0-1.0 9 1 0 Updated Jan 27, 2026
  • sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    anchore/sbom-action’s past year of commit activity
    TypeScript 218 Apache-2.0 34 13 (1 issue needs help) 2 Updated Jan 27, 2026
  • scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    anchore/scan-action’s past year of commit activity
    JavaScript 267 MIT 85 20 (4 issues need help) 1 Updated Jan 27, 2026