Skip to content
@anchore

Anchore, Inc.

README.md

 Mastodon  Twitter   LinkedIn   Anchore Community Discourse 

Welcome 👋

We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype

Blog

We regularly write about what we're working on; here are some recent blog posts:

Community

We discuss our open source tools on Discourse. Here are some recent topics:

Pinned Loading

  1. syft syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    Go 9.7k 998

  2. grype grype Public

    A vulnerability scanner for container images and filesystems

    Go 13k 914

  3. scan-action scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    JavaScript 290 94

  4. sbom-action sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    TypeScript 264 45

  5. kubernetes-admission-controller kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    Go 66 28

  6. anchore-charts anchore-charts Public

    Helm charts for Anchore tools and services

    Python 59 69

Repositories

Showing 10 of 111 repositories
  • redhat-enterprise-linux-9-stig-baseline Public Forked from mitre/redhat-enterprise-linux-9-stig-baseline

    RHEL 9.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL9.

    anchore/redhat-enterprise-linux-9-stig-baseline's past year of commit activity
    Ruby 0 6 0 0 Updated Oct 14, 2026
  • harbor-scanner-adapter Public

    Harbor Scanner Adapter for Anchore Engine and Enterprise

    anchore/harbor-scanner-adapter's past year of commit activity
    Go 40 Apache-2.0 17 18 2 Updated Oct 14, 2026
  • anchore-charts Public

    Helm charts for Anchore tools and services

    anchore/anchore-charts's past year of commit activity
    Python 59 Apache-2.0 69 5 7 Updated Oct 14, 2026
  • security-identifiers Public

    Contains the Anchore-allocated security identifiers and the relationships to upstream security data source identifiers

    anchore/security-identifiers's past year of commit activity
    1 CC0-1.0 1 0 1 Updated Oct 14, 2026
  • security-cli Public

    Tool for performing various Anchore security data curation tasks

    anchore/security-cli's past year of commit activity
    Python 1 Apache-2.0 1 0 1 Updated Oct 14, 2026
  • redhat-enterprise-linux-8-stig-baseline Public Forked from mitre/redhat-enterprise-linux-8-stig-baseline

    RHEL 8.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL8.

    anchore/redhat-enterprise-linux-8-stig-baseline's past year of commit activity
    Ruby 0 7 0 2 Updated Oct 14, 2026
  • vulnerability-index-spec-files Public

    Controls the rendering of specific vulnerability data records

    anchore/vulnerability-index-spec-files's past year of commit activity
    1 CC0-1.0 10 1 1 Updated Oct 14, 2026
  • dataset-security-cve5-enriched Public

    Anchore Security CVE 5 Enriched Dataset - This repo contains select fragments of the CVE 5 data with additional enrichments by Anchore and community contributors

    anchore/dataset-security-cve5-enriched's past year of commit activity
    0 CC0-1.0 1 0 0 Updated Oct 14, 2026
  • kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    anchore/kubernetes-admission-controller's past year of commit activity
    Go 66 Apache-2.0 28 12 4 Updated Oct 14, 2026
  • dataset-security-cve5-control Public

    Anchore Security CVE 5 Control Dataset - The data in this repo serves as the control dataset for the Anchore CVE5 data curation efforts at https://github.com/anchore/dataset-security-cve5-enriched

    anchore/dataset-security-cve5-control's past year of commit activity
    0 CC0-1.0 1 0 0 Updated Oct 14, 2026
View all repositories