We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype
We regularly write about what we're working on; here are some recent blog posts:
- Anchore Enterprise is now SPDX 3 Ready (1 day ago)
- NPM Supply Chain Breach Response for Anchore Enterprise and Grype Users (5 days ago)
- DevOpsDays Washington, DC (6 days ago)
- Navigating the New Compliance Frontier (1 week ago)
- Sabel Systems Leverages Anchore SBOM and SECURE to Scale Compliance While Reducing Vulnerability Review Time by 75% (1 week ago)
We discuss our open source tools on Discourse. Here are some recent topics:
- Grype - v0.100.0 released (1 day ago)
- Syft - v1.33.0 released (1 day ago)
- September 18th | Open Source Gardening | Live Stream (1 day ago)
- Anchore Open Source Weekly Report, Week 37, 2025 (1 day ago)
- Why SBOM contains configuration files? (1 day ago)