We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype
We regularly write about what we're working on; here are some recent blog posts:
- Easyjson and foreign influence, should we panic? (3 days ago)
- EU CRA SBOM Requirements: Overview & Compliance Tips (5 days ago)
- SBOMs as the Crossroad of the Software Supply Chain: Anchore Learning Week (Day 5) (1 week ago)
- How the US Navy Approaches DevSecOps with Raise 2.0 (1 week ago)
- SBOM Insights on LLMs, Compliance Attestations and Security Mental Models: Anchore Learning Week (Day 4) (1 week ago)
We discuss our open source tools on Discourse. Here are some recent topics:
- Grype - v0.92.1 released (2 days ago)
- Syft - v1.25.0 & v1.25.1 released (2 days ago)
- For scan C++ binary, how to recognize the package which the binary come from (2 days ago)
- Grype - v0.92.0 released (4 days ago)
- Syft - v1.24.0 released (4 days ago)