Open Source

Developer-friendly tools for software supply chain security

Syft

Syft logo
Syft logo

A CLI tool for generating a Software Bill of Materials (SBOM) from container images and filesystems.

Grype

Grype logo
Grype logo

An easy-to-integrate open source vulnerability scanning tool for container images and filesystems.

Grant

Grant logo
Grant logo

View licenses for containers, SBOM documents, filesystems, and apply rules that help you build a license compliance report.

Documentation

Comprehensive guides, tutorials, and API documentation to help you get started and make the most of our tools.

Contribute

We welcome code and documentation contributions via pull request on GitHub. New contributors are always welcome!

Community

Join our Discourse forum to chat with members of the Anchore Open Source community and get help from other users.