We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype
We regularly write about what we're working on; here are some recent blog posts:
- A Complete Guide to Container Security (6 days ago)
- Rocky Mountain Cyber Symposium 2025 (1 week ago)
- WEST 2025 (1 week ago)
- Software Supply Chain Security in 2025: SBOMs Take Center Stage (1 week ago)
- All Things SBOM in 2025: a Weekly Webinar Series (2 weeks ago)
We discuss our open source tools on Discourse. Here are some recent topics:
- January 30th | Open Source Gardening | Live Stream (today)
- Change in PURL since syft v.1.19.0 (1 day ago)
- What are the plans for metadata in the syft format (3 days ago)
- January 23rd | Open Source Gardening | Live Stream (4 days ago)
- Show each CVE only once i final results (4 days ago)