Skip to content
@anchore

Anchore, Inc.

README.md

 Mastodon  Twitter   LinkedIn   Anchore Community Discourse 

Welcome 👋

We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype

Blog

We regularly write about what we're working on; here are some recent blog posts:

Community

We discuss our open source tools on Discourse. Here are some recent topics:

Pinned Loading

  1. syft syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    Go 9.8k 1k

  2. grype grype Public

    A vulnerability scanner for container images and filesystems

    Go 13.2k 934

  3. scan-action scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    JavaScript 293 95

  4. sbom-action sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    TypeScript 265 47

  5. kubernetes-admission-controller kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    Go 66 28

  6. anchore-charts anchore-charts Public

    Helm charts for Anchore tools and services

    Go Template 59 67

Repositories

Showing 10 of 112 repositories
  • bubbly Public
    anchore/bubbly's past year of commit activity
    Go 8 Apache-2.0 2 0 5 Updated Nov 6, 2026
  • quill Public

    Simple mac binary signing from any platform

    anchore/quill's past year of commit activity
    Go 525 Apache-2.0 24 12 (1 issue needs help) 7 Updated Nov 6, 2026
  • kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    anchore/kubernetes-admission-controller's past year of commit activity
    Go 66 Apache-2.0 28 12 3 Updated Nov 6, 2026
  • scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    anchore/scan-action's past year of commit activity
    JavaScript 293 MIT 95 22 (6 issues need help) 11 Updated Nov 6, 2026
  • security-identifiers Public

    Contains the Anchore-allocated security identifiers and the relationships to upstream security data source identifiers

    anchore/security-identifiers's past year of commit activity
    1 CC0-1.0 1 0 0 Updated Nov 6, 2026
  • go-version Public Forked from hashicorp/go-version

    A Go (golang) library for parsing and verifying versions and version constraints.

    anchore/go-version's past year of commit activity
    Go 0 MPL-2.0 223 0 3 Updated Nov 6, 2026
  • grype-db Public
    anchore/grype-db's past year of commit activity
    Python 70 Apache-2.0 42 10 6 Updated Nov 6, 2026
  • packageurl-go Public Forked from package-url/packageurl-go

    Go implementation of the package url spec

    anchore/packageurl-go's past year of commit activity
    Go 1 MIT 69 0 6 Updated Nov 6, 2026
  • vunnel Public

    Tool for collecting vulnerability data from various sources (used to build the grype database)

    anchore/vunnel's past year of commit activity
    Python 134 Apache-2.0 73 36 (1 issue needs help) 28 Updated Nov 6, 2026
  • go-make Public
    anchore/go-make's past year of commit activity
    Go 0 Apache-2.0 4 1 6 Updated Nov 6, 2026
View all repositories