We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype
We regularly write about what we're working on; here are some recent blog posts:
- The Developer’s Guide to SBOMs & Policy-as-Code (today)
- Contributing to Vulnerability Data: Making Security Better for Everyone (5 days ago)
- Software Supply Chain Transparency: Why SBOMs Are the Missing Piece in Your ConMon Strategy (1 week ago)
- Securing Open Source Software Supply Chains – The Next Frontier of Innovation (1 week ago)
- Rapid Incident Response to Zero-Day Vulnerabilities with SBOMs (1 week ago)
We discuss our open source tools on Discourse. Here are some recent topics:
- Understanding Syft's Software Detection Mechanism and Architecture (today)
- Does Syft automaticaly detects existing SBOM files? (5 days ago)
- March 20th | Open Source Gardening | Live Stream (1 week ago)
- Grype - v0.90.0 released (1 week ago)
- Syft - v1.21.0 released (1 week ago)