We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype
We regularly write about what we're working on; here are some recent blog posts:
- Anchore and Bitnami: Bridging the Data Gap for Accurate Image Scanning (6 days ago)
- Neil Levine, Anchore | Chainguard Assemble 2026 (6 days ago)
- KubeCon EU 2026 (1 week ago)
- CypherCon 2026 (1 week ago)
- Anchore Enterprise 5.25: Unified Scanning Engine and First-Class Imported SBOMs (1 week ago)
We discuss our open source tools on Discourse. Here are some recent topics:
- PSA: No livestream(s) next week (Mar 26th, 2026) (1 week ago)
- Syft is not listing the packages under dev_dependencies section in package-lock.json (1 week ago)
- PSA: No livestream(s) this week (Mar 5th, 2026) (3 weeks ago)
- Recommended Workflow for Large-Scale Recurring SBOM Scans with Syft and Grype (1 month ago)
- Missing package identification from .zap packaging (1 month ago)