Skip to content
@anchore

Anchore, Inc.

README.md

 Mastodon  Twitter   LinkedIn   Anchore Community Discourse 

Welcome 👋

We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype

Blog

We regularly write about what we're working on; here are some recent blog posts:

Community

We discuss our open source tools on Discourse. Here are some recent topics:

Pinned Loading

  1. syft syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    Go 9.7k 1k

  2. grype grype Public

    A vulnerability scanner for container images and filesystems

    Go 13.1k 926

  3. scan-action scan-action Public

    Anchore container analysis and scan provided as a GitHub Action

    JavaScript 291 95

  4. sbom-action sbom-action Public

    GitHub Action for creating software bill of materials using Syft.

    TypeScript 264 46

  5. kubernetes-admission-controller kubernetes-admission-controller Public

    Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

    Go 66 28

  6. anchore-charts anchore-charts Public

    Helm charts for Anchore tools and services

    Go Template 59 68

Repositories

Showing 10 of 112 repositories
  • yardstick Public

    Compare vulnerability scanners results (to make them better!)

    anchore/yardstick's past year of commit activity
    Python 27 Apache-2.0 9 8 11 Updated Oct 24, 2026
  • syft Public

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    anchore/syft's past year of commit activity
    Go 9,737 Apache-2.0 1,018 523 168 Updated Oct 24, 2026
  • stereoscope Public

    go library for processing container images and simulating a squash filesystem

    anchore/stereoscope's past year of commit activity
    Go 115 Apache-2.0 68 19 9 Updated Oct 24, 2026
  • quill Public

    Simple mac binary signing from any platform

    anchore/quill's past year of commit activity
    Go 522 Apache-2.0 24 12 (1 issue needs help) 6 Updated Oct 24, 2026
  • grype Public

    A vulnerability scanner for container images and filesystems

    anchore/grype's past year of commit activity
    Go 13,094 Apache-2.0 926 332 100 Updated Oct 24, 2026
  • grant Public

    A license scanner for container images and filesystems.

    anchore/grant's past year of commit activity
    Go 193 Apache-2.0 19 19 1 Updated Oct 24, 2026
  • go-sync Public
    anchore/go-sync's past year of commit activity
    Go 2 Apache-2.0 1 0 3 Updated Oct 24, 2026
  • go-struct-converter Public

    Go library that provides a set of conversion utilities to help migrate between different versioned Go structs.

    anchore/go-struct-converter's past year of commit activity
    Go 11 Apache-2.0 2 0 0 Updated Oct 24, 2026
  • go-macholibre Public
    anchore/go-macholibre's past year of commit activity
    Go 7 Apache-2.0 2 0 3 Updated Oct 24, 2026
  • go-lzo Public

    A LZO1X decompression library written in go that is permissively licensed

    anchore/go-lzo's past year of commit activity
    Go 3 MIT 1 0 5 Updated Oct 24, 2026
View all repositories