We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype
We regularly write about what we're working on; here are some recent blog posts:
- Securing Open Source Software Supply Chains – The Next Frontier of Innovation (4 days ago)
- Rapid Incident Response to Zero-Day Vulnerabilities with SBOMs (4 days ago)
- How to Automate Container Vulnerability Scanning for Harbor Registry with Anchore Enterprise (5 days ago)
- Grype DB Schema Evolution: From v5 to v6 – Smaller, Faster, Better (1 week ago)
- The future of SBOMs with Kate Stewart (1 week ago)
We discuss our open source tools on Discourse. Here are some recent topics:
- Grype - v0.90.0 released (1 day ago)
- Syft - v1.21.0 released (1 day ago)
- Stereoscope - v0.1.0 released (1 day ago)
- Grype doesnt match CVE-2025-24813 (1 day ago)
- Grype - v0.89.1 released (5 days ago)