Skip to content
@anchore

Anchore, Inc.

README.md

 Mastodon  Twitter   LinkedIn   Anchore Community Discourse 

Welcome 👋

We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype

Blog

We regularly write about what we're working on; here are some recent blog posts:

Community

We discuss our open source tools on Discourse. Here are some recent topics:

Pinned Loading

  1. syft syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    Go 8.5k 779

  2. grype grype Public

    A vulnerability scanner for container images and filesystems

    Go 11.7k 753

  3. scan-action scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    JavaScript 268 85

  4. sbom-action sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    TypeScript 227 35

  5. kubernetes-admission-controller kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    Go 65 28

  6. anchore-charts anchore-charts Public

    Helm charts for Anchore tools and services

    Python 53 72

Repositories

Showing 10 of 101 repositories
  • nvd-data-overrides Public
    anchore/nvd-data-overrides’s past year of commit activity
    Python 50 CC0-1.0 6 1 1 Updated Mar 16, 2026
  • fangs Public
    anchore/fangs’s past year of commit activity
    Go 17 Apache-2.0 2 2 2 Updated Mar 16, 2026
  • ecs-inventory Public

    Anchore ECS Inventory can poll ECS Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

    anchore/ecs-inventory’s past year of commit activity
    Go 7 Apache-2.0 5 0 7 Updated Mar 16, 2026
  • vunnel Public

    Tool for collecting vulnerability data from various sources (used to build the grype database)

    anchore/vunnel’s past year of commit activity
    Python 114 Apache-2.0 51 34 (1 issue needs help) 14 Updated Mar 16, 2026
  • clio Public

    An easy way to bootstrap your application with batteries included.

    anchore/clio’s past year of commit activity
    Go 15 Apache-2.0 6 2 3 Updated Mar 16, 2026
  • stereoscope Public

    go library for processing container images and simulating a squash filesystem

    anchore/stereoscope’s past year of commit activity
    Go 106 Apache-2.0 56 21 15 Updated Mar 16, 2026
  • go-struct-converter Public

    Go library that provides a set of conversion utilities to help migrate between different versioned Go structs.

    anchore/go-struct-converter’s past year of commit activity
    Go 10 Apache-2.0 1 0 1 Updated Mar 16, 2026
  • cve-data-enrichment Public
    anchore/cve-data-enrichment’s past year of commit activity
    Shell 17 CC0-1.0 9 1 1 Updated Mar 16, 2026
  • vulnerability-index-spec-files Public

    Controls the rendering of specific vulnerability data records

    anchore/vulnerability-index-spec-files’s past year of commit activity
    0 CC0-1.0 0 0 1 Updated Mar 16, 2026
  • sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    anchore/sbom-action’s past year of commit activity
    TypeScript 227 Apache-2.0 35 12 (1 issue needs help) 6 Updated Mar 16, 2026
View all repositories