Anchore, Inc. ORG

A vulnerability scanner for container images and filesystems

A command-line tool that scans container images, code folders, or software inventory files for known security vulnerabilities across OS packages and many programming language ecosystems in a single command.

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

A command-line tool that scans container images or code folders and produces an inventory list of every package and library inside, in standard formats that security tools can read. Makes it straightforward to check software for known vulnerabilities.

A service that analyzes docker images and scans for vulnerabilities

Simple mac binary signing from any platform

This project is deprecated. Work is now done on https://github.com/anchore/syft and https://github.com/anchore/grype for local-host Software Bill of Materials and vulnerability scanning tools.

Anchore container analysis and scan provided as a GitHub Action

GitHub Action for creating software bill of materials using Syft.

A license scanner for container images and filesystems.

Tool for collecting vulnerability data from various sources (used to build the grype database)

go library for processing container images and simulating a squash filesystem

Simple command-line client to the Anchore Engine service

Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

No description.

Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

a fast changelog generator sourced from PRs and Issues

Manage a directory of binaries without a package manager

Helm charts for Anchore tools and services

No description.

Harbor Scanner Adapter for Anchore Engine and Enterprise

Contains scripts for running anchore engine in CI pipelines

Compare vulnerability scanners results (to make them better!)

Grype vulnerability check plugin for Visual Studio Code

Repository of SBOMs generated by the syft SBOM generator tool, against a list of popular dockerhub container images.

No description.

No description.

No description.

An easy way to bootstrap your application with batteries included.

Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners

Go library that provides a set of conversion utilities to help migrate between different versioned Go structs.

MCP Server for Anchore's Grype

Tool for connecting to an anchore-engine DB and generating grafeas note/occurrence JSON documents

Anchore ECS Inventory can poll ECS Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

No description.

No description.

Deploy Anchore Enterprise in an environment of your choice. Then follow through a series of labs that showcase how you can improve security across your software supply chain.

Anchore OSS Documentation

Helm based anchore engine operator

Golang client for Anchore API

Container automation for testing and validation

Go client for Enterprise API (Not Officially Supported)

Anchore Task Extension for Azure DevOps Pipelines

No description.

No description.

reusable workflows to be used for the oss projects

A LZO1X decompression library written in go that is permissively licensed

homebrew tap for syft

Repository for the Grype based CircleCI orb

Contains the Anchore-allocated security identifiers and the relationships to upstream security data source identifiers

No description.

No description.

Go implementation of the package url spec

Anchore, Inc

No description.

CLI utility for managing Anchore policy bundles as individual components. Useful for git-based policy management.

Easily create & extract archives, and compress & decompress files of various formats

Functional validation of the scan-action project

Some scripting to handling creation of preloaded anchore DB container

Repository for example Anchore Engine deployment methods and integrations

Curated applications for Kubernetes

Starter security policies for Anchore

Controls the rendering of specific vulnerability data records

No description.

RHEL 9.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL9.

InSpec profile for Chainguard container images

No description.

Tool for performing various Anchore security data curation tasks

homebrew tap for grype

Library for enumerating packages in an RPM DB (without bindings)

Go library for detecting and expanding the user's home directory without cgo.

InSpec profile to validate the secure configuration of Red Hat Enterprise Linux 7, against DISA's Red Hat Enterprise Linux 7 Security Technical Implementation Guide (STIG) Version 3, Release 10.

Contains infrastructure for running functional tests using Helm chart deployments

A golang library for parsing deb package versions

A golang library for parsing apk package versions

A golang library for parsing PEP 440 compliant Python versions

STIG Ready Content: InSpec Profile for NGINX Open Source based off the Web SRG V2R3

No description.

No description.

A golang library for writing dynamic content to the terminal

simple progress utils

No description.

an go event bus

go client for the feeds API

A repository for storing example configurations for auxillary systems utilized by Anchore Engine

No description.

Repo for all Anchore circleci orb source code

No description.

The pure-Go SQLite driver for GORM

The licensecheck package classifies license files and heuristically determines how well they correspond to known open source licenses.

For the distributed charts search at hub.helm.sh

A Go (golang) library for parsing and verifying versions and version constraints.

common set of utilities for testing

A fast Golang library for media type and file extension detection, based on magic numbers

:octocat: Automatically add and move Issues/Pull Requests on a Project board

misc utils

🍻 Default formulae for the missing package manager for macOS (or Linux)

No description.

The canonical source for Kubernetes Operators that appear on OperatorHub.io, OpenShift Container Platform and OKD.

block indefinitely by waiting on SIGTERM/SIGINT

No description.

No description.

InSpec profile for Apache Tomcat 9.x STIG

(WIP) InSpec profile to validate the secure configuration of Ubuntu 22.04, against DISA's Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 1

(WIP) InSpec profile to validate the secure configuration of Ubuntu 22.04, against DISA's Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 1

RHEL 8.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL8.

No description.

Repository for sample Anchore policies