AppSecNews

vendor

Anchore

Tools profiled
3
Categories
SCA3

Tools from Anchore

Anchore

Anchore

SCA

An SBOM-first software composition platform that catalogs container and filesystem contents, matches them against vulnerability feeds, and enforces policy in the pipeline.

Open source and commercial
Established

Anchore Grype

Anchore

SCA

An open source scanner that matches the contents of container images, filesystems and SBOMs against operating system and language ecosystem vulnerability feeds.

Open source
Established

Syft

Anchore

SCA

Command line SBOM generator that catalogs packages in container images, filesystems and archives, emitting SPDX, CycloneDX or its own JSON format.

Open source
Established