Skip to content
@anchore

Anchore, Inc.

README.md

 Mastodon  Twitter   LinkedIn   Anchore Community Discourse 

Welcome 👋

We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype

Blog

We regularly write about what we're working on; here are some recent blog posts:

Community

We discuss our open source tools on Discourse. Here are some recent topics:

Pinned Loading

  1. syft syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    Go 9.8k 1k

  2. grype grype Public

    A vulnerability scanner for container images and filesystems

    Go 13.1k 927

  3. scan-action scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    JavaScript 292 95

  4. sbom-action sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    TypeScript 265 47

  5. kubernetes-admission-controller kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    Go 66 28

  6. anchore-charts anchore-charts Public

    Helm charts for Anchore tools and services

    Go Template 59 67

Repositories

Showing 10 of 112 repositories
  • syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    anchore/syft's past year of commit activity
    Go 9,752 Apache-2.0 1,021 526 171 Updated Oct 26, 2026
  • dataset-security-cve5-upstream-snapshot Public

    Version-controlled upstream snapshots of CVE v5 json for use with Anchore data enrichment processes

    anchore/dataset-security-cve5-upstream-snapshot's past year of commit activity
    0 2 0 1 Updated Oct 26, 2026
  • kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    anchore/kubernetes-admission-controller's past year of commit activity
    Go 66 Apache-2.0 28 12 6 Updated Oct 26, 2026
  • security-identifiers Public

    Contains the Anchore-allocated security identifiers and the relationships to upstream security data source identifiers

    anchore/security-identifiers's past year of commit activity
    1 CC0-1.0 1 0 0 Updated Oct 26, 2026
  • yardstick Public

    Compare vulnerability scanners results (to make them better!)

    anchore/yardstick's past year of commit activity
    Python 27 Apache-2.0 9 8 12 Updated Oct 26, 2026
  • k8s-inventory Public

    Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

    anchore/k8s-inventory's past year of commit activity
    Go 73 Apache-2.0 16 4 5 Updated Oct 26, 2026
  • go-rpmdb Public Forked from knqyf263/go-rpmdb

    Library for enumerating packages in an RPM DB (without bindings)

    anchore/go-rpmdb's past year of commit activity
    Go 1 MIT 71 0 1 Updated Oct 26, 2026
  • grype-db Public
    anchore/grype-db's past year of commit activity
    Python 70 Apache-2.0 42 12 7 Updated Oct 25, 2026
  • vulnerability-match-labels Public

    Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners

    anchore/vulnerability-match-labels's past year of commit activity
    Python 14 CC0-1.0 13 4 5 Updated Oct 24, 2026
  • stereoscope Public

    go library for processing container images and simulating a squash filesystem

    anchore/stereoscope's past year of commit activity
    Go 115 Apache-2.0 68 19 10 Updated Oct 24, 2026
View all repositories