Skip to content
@anchore

Anchore, Inc.

README.md

 Mastodon  Twitter   LinkedIn   Anchore Community Discourse 

Welcome 👋

We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype

Blog

We regularly write about what we're working on; here are some recent blog posts:

Community

We discuss our open source tools on Discourse. Here are some recent topics:

Pinned Loading

  1. syft syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    Go 8.2k 753

  2. grype grype Public

    A vulnerability scanner for container images and filesystems

    Go 11.4k 730

  3. scan-action scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    JavaScript 265 84

  4. sbom-action sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    TypeScript 216 34

  5. kubernetes-admission-controller kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    Go 65 28

  6. anchore-charts anchore-charts Public

    Helm charts for Anchore tools and services

    Python 53 73

Repositories

Showing 10 of 101 repositories
  • security-identifiers Public

    Contains the Anchore-allocated security identifiers and the relationships to upstream security data source identifiers

    anchore/security-identifiers’s past year of commit activity
    1 CC0-1.0 0 0 0 Updated Jan 19, 2026
  • yardstick Public

    Compare vulnerability scanners results (to make them better!)

    anchore/yardstick’s past year of commit activity
    Python 26 Apache-2.0 7 6 6 Updated Jan 19, 2026
  • workflows Public

    reusable workflows to be used for the oss projects

    anchore/workflows’s past year of commit activity
    Python 2 Apache-2.0 0 0 4 Updated Jan 19, 2026
  • oss-docs Public

    Anchore OSS Documentation

    anchore/oss-docs’s past year of commit activity
    Python 4 Apache-2.0 3 5 6 Updated Jan 19, 2026
  • syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    anchore/syft’s past year of commit activity
    Go 8,227 Apache-2.0 753 465 49 Updated Jan 19, 2026
  • nvd-data-overrides Public
    anchore/nvd-data-overrides’s past year of commit activity
    Python 48 CC0-1.0 6 1 1 Updated Jan 19, 2026
  • go-lzo Public

    A LZO1X decompression library written in go that is permissively licensed

    anchore/go-lzo’s past year of commit activity
    Go 1 MIT 0 0 6 Updated Jan 19, 2026
  • k8s-inventory Public

    Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

    anchore/k8s-inventory’s past year of commit activity
    Go 67 Apache-2.0 17 4 2 Updated Jan 19, 2026
  • go-make Public
    anchore/go-make’s past year of commit activity
    Go 0 Apache-2.0 1 0 10 Updated Jan 19, 2026
  • .github Public

    Anchore, Inc

    anchore/.github’s past year of commit activity
    1 0 0 0 Updated Jan 19, 2026
View all repositories