Skip to content
@anchore

Anchore, Inc.

README.md

 Mastodon  Twitter   LinkedIn   Anchore Community Discourse 

Welcome 👋

We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype

Blog

We regularly write about what we're working on; here are some recent blog posts:

Community

We discuss our open source tools on Discourse. Here are some recent topics:

Pinned Loading

  1. syft syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    Go 9.6k 976

  2. grype grype Public

    A vulnerability scanner for container images and filesystems

    Go 13k 893

  3. scan-action scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    JavaScript 288 93

  4. sbom-action sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    TypeScript 262 45

  5. kubernetes-admission-controller kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    Go 65 28

  6. anchore-charts anchore-charts Public

    Helm charts for Anchore tools and services

    Python 58 69

Repositories

Showing 10 of 111 repositories
  • grype Public

    A vulnerability scanner for container images and filesystems

    anchore/grype's past year of commit activity
    Go 12,966 Apache-2.0 893 330 81 Updated Oct 1, 2026
  • ecs-inventory Public

    Anchore ECS Inventory can poll ECS Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

    anchore/ecs-inventory's past year of commit activity
    Go 8 Apache-2.0 5 0 4 Updated Oct 1, 2026
  • vunnel Public

    Tool for collecting vulnerability data from various sources (used to build the grype database)

    anchore/vunnel's past year of commit activity
    Python 132 Apache-2.0 66 36 (1 issue needs help) 20 Updated Oct 1, 2026
  • grant Public

    A license scanner for container images and filesystems.

    anchore/grant's past year of commit activity
    Go 191 Apache-2.0 18 25 6 Updated Oct 1, 2026
  • syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    anchore/syft's past year of commit activity
    Go 9,631 Apache-2.0 976 505 135 Updated Oct 1, 2026
  • chronicle Public

    a fast changelog generator sourced from PRs and Issues

    anchore/chronicle's past year of commit activity
    Go 65 Apache-2.0 9 15 (1 issue needs help) 1 Updated Oct 1, 2026
  • homebrew-syft Public

    homebrew tap for syft

    anchore/homebrew-syft's past year of commit activity
    Ruby 2 Apache-2.0 0 1 1 Updated Oct 1, 2026
  • vulnerability-match-labels Public

    Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners

    anchore/vulnerability-match-labels's past year of commit activity
    Python 14 CC0-1.0 13 4 5 Updated Oct 1, 2026
  • go-rpmdb Public Forked from knqyf263/go-rpmdb

    Library for enumerating packages in an RPM DB (without bindings)

    anchore/go-rpmdb's past year of commit activity
    Go 1 MIT 70 0 0 Updated Oct 1, 2026
  • quill Public

    Simple mac binary signing from any platform

    anchore/quill's past year of commit activity
    Go 521 Apache-2.0 23 12 (1 issue needs help) 5 Updated Oct 1, 2026
View all repositories