Anchore, Inc.

grype

A vulnerability scanner for container images and filesystems

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

quill

Simple mac binary signing from any platform

scan-action

Anchore container analysis and scan provided as a GitHub Action

sbom-action

GitHub Action for creating software bill of materials using Syft.

vunnel

Tool for collecting vulnerability data from various sources (used to build the grype database)

kubernetes-admission-controller

Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

k8s-inventory

Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

anchore-charts

Helm charts for Anchore tools and services

chronicle

a fast changelog generator sourced from PRs and Issues

grant

Search an SBOM for licenses and the packages they belong to

nvd-data-overrides

harbor-scanner-adapter

Harbor Scanner Adapter for Anchore Engine and Enterprise

grype-db

binny

Manage a directory of binaries without a package manager

vulnerability-data-tools

vulnerability-match-labels

Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners

yardstick

Compare vulnerability scanners results (to make them better!)

bubbly

fangs

test-infra

Contains infrastructure for running functional tests using Helm chart deployments

clio

An easy way to bootstrap your application with batteries included.

ecs-inventory

Anchore ECS Inventory can poll ECS Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

enterprise-client-go

Go client for Enterprise API (Not Officially Supported)

homebrew-syft

homebrew tap for syft

test-images

Container automation for testing and validation

homebrew-grype

homebrew tap for grype

packageurl-go

Go implementation of the package url spec

.github

Anchore, Inc

cve-data-enrichment