We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype
We regularly write about what we're working on; here are some recent blog posts:
- The Evolution of SBOMs in the DevSecOps Lifecycle: From Planning to Production (1 day ago)
- Choosing the Right SBOM Generator: A Framework for Success (1 week ago)
- 2024 Software Supply Chain Security Report (2 weeks ago)
- Anchore on AWS Marketplace and joins ISV Accelerate (2 weeks ago)
- Anchore Survey 2024: Only 1 in 5 organizations have full visibility of open source (2 weeks ago)
We discuss our open source tools on Discourse. Here are some recent topics:
- Kernel headers ignore (1 day ago)
- Grype versions before v0.51.0 (Oct 2022) will stop getting new vulnerability data on 25 January 2025 (1 day ago)
- Question about relationship and the impact on grype results (1 day ago)
- Grype refers to file in repo after nextjs upgrade (2 days ago)
- Exclude-binary-overlap-by-ownership flag is not working (6 days ago)