Repositories list

• yardstick

  Public
  Compare vulnerability scanners results (to make them better!)

  vulnerabilityhacktoberfestvulnerability-scanners+ 1

  vulnerabilityhacktoberfestvulnerability-scannersgrype

  Python

  •

  Apache License 2.0

  •88 forks•2727 stars•77 issues•44 pull requests•Updated Apr 13, 2026Apr 13, 2026

• workflows

  Public
  reusable workflows to be used for the oss projects

  Python

  •

  Apache License 2.0

  •00 forks•22 stars•00 issues•88 pull requests•Updated Apr 13, 2026Apr 13, 2026

• nvd-data-overrides

  Public
  Python

  •

  Creative Commons Zero v1.0 Universal

  •77 forks•5050 stars•11 issue•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• oss-docs

  Public

  anchore/oss-docs’s past year of commit activity
  Anchore OSS Documentation

  Python

  •

  Apache License 2.0

  •66 forks•44 stars•77 issues•1616 pull requests•Updated Apr 13, 2026Apr 13, 2026

• security-identifiers

  Public
  Contains the Anchore-allocated security identifiers and the relationships to upstream security data source identifiers

  Creative Commons Zero v1.0 Universal

  •11 fork•11 star•00 issues•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• scan-action

  Public
  Anchore container analysis and scan provided as a GitHub Action

  workflowactionsvulnerabilities+ 3

  workflowactionsvulnerabilitiespolicy-evaluationanchore-enginegithub-actions

  JavaScript

  •

  MIT License

  •8989 forks•277277 stars•2020 issues•55 pull requests•Updated Apr 13, 2026Apr 13, 2026

• quill

  Public
  Simple mac binary signing from any platform

  macapplesigning+ 8

  macapplesigningbinarydarwinmachohacktoberfestcodesigningcodesignnotarization+ 1

  Go

  •

  Apache License 2.0

  •2020 forks•496496 stars•1212 issues•1010 pull requests•Updated Apr 13, 2026Apr 13, 2026

• syft

  Public

  anchore/syft’s past year of commit activity
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems

  godockergolang+ 8

  godockergolangtoolcontainersstatic-analysisocispdxhacktoberfestsbom+ 1

  Go

  •

  Apache License 2.0

  •809809 forks•8.7k8.7k stars•494494 issues•9090 pull requests•Updated Apr 12, 2026Apr 12, 2026

• anchore-charts

  Public
  Helm charts for Anchore tools and services

  kubernetessecurityhelm+ 2

  kubernetessecurityhelmhelm-chartssecurity-vulnerability-assessment

  Python

  •

  Apache License 2.0

  •6969 forks•5353 stars•55 issues•88 pull requests•Updated Apr 11, 2026Apr 11, 2026

• chronicle

  Public
  a fast changelog generator sourced from PRs and Issues

  githubgolangchangelog+ 2

  githubgolangchangeloghacktoberfestchangelog-generator

  Go

  •

  Apache License 2.0

  •55 forks•6363 stars•1616 issues•22 pull requests•Updated Apr 10, 2026Apr 10, 2026

• vunnel

  Public
  Tool for collecting vulnerability data from various sources (used to build the grype database)

  datavulnerabilityhacktoberfest+ 1

  datavulnerabilityhacktoberfestgrype

  Python

  •

  Apache License 2.0

  •5454 forks•115115 stars•3535 issues•1717 pull requests•Updated Apr 10, 2026Apr 10, 2026

• clio

  Public
  An easy way to bootstrap your application with batteries included.

  gocligolang+ 6

  gocligolangloggerviperevent-bushacktoberfestcobrabubbletea

  Go

  •

  Apache License 2.0

  •77 forks•1616 stars•22 issues•55 pull requests•Updated Apr 10, 2026Apr 10, 2026

• sbom-action

  Public
  GitHub Action for creating software bill of materials using Syft.

  TypeScript

  •

  Apache License 2.0

  •3838 forks•229229 stars•1212 issues•1010 pull requests•Updated Apr 10, 2026Apr 10, 2026

• grant

  Public

  anchore/grant’s past year of commit activity
  A license scanner for container images and filesystems.

  golangstatic-analysiscompliance+ 2

  golangstatic-analysiscompliancelicensesbom

  Go

  •

  Apache License 2.0

  •1616 forks•160160 stars•2424 issues•1313 pull requests•Updated Apr 10, 2026Apr 10, 2026

• grype

  Public
  A vulnerability scanner for container images and filesystems

  godockergolang+ 12

  godockergolangsecuritytoolcontainersstatic-analysisocivulnerabilityvex+ 5

  Go

  •

  Apache License 2.0

  •780780 forks•12k12k stars•346346 issues•5353 pull requests•Updated Apr 10, 2026Apr 10, 2026

• cve-data-enrichment

  Public

  anchore/cve-data-enrichment’s past year of commit activity
  Shell

  •

  Creative Commons Zero v1.0 Universal

  •1010 forks•1717 stars•11 issue•00 pull requests•Updated Apr 10, 2026Apr 10, 2026

• vulnerability-index-spec-files

  Public
  Controls the rendering of specific vulnerability data records

  Creative Commons Zero v1.0 Universal

  •22 forks•00 stars•00 issues•00 pull requests•Updated Apr 10, 2026Apr 10, 2026

• harbor-scanner-adapter

  Public
  Harbor Scanner Adapter for Anchore Engine and Enterprise

  dockervulnerabilitiesharbor+ 1

  dockervulnerabilitiesharborvulnerability-scanner

  Go

  •

  Apache License 2.0

  •1717 forks•4040 stars•1818 issues•1010 pull requests•Updated Apr 10, 2026Apr 10, 2026

• go-logger

  Public
  Go

  •

  Apache License 2.0

  •33 forks•22 stars•44 issues•44 pull requests•Updated Apr 10, 2026Apr 10, 2026

• security-cli

  Public
  Tool for performing various Anchore security data curation tasks

  Python

  •

  Apache License 2.0

  •11 fork•00 stars•00 issues•22 pull requests•Updated Apr 10, 2026Apr 10, 2026

• vulnerability-data-tools

  Public
  Python

  •

  Apache License 2.0

  •55 forks•1616 stars•33 issues•11 pull request•Updated Apr 10, 2026Apr 10, 2026

• binny

  Public
  Manage a directory of binaries without a package manager

  package-managerbinaryhacktoberfest+ 2

  package-managerbinaryhacktoberfestgithub-releasego-installer

  Go

  •

  Apache License 2.0

  •77 forks•5353 stars•88 issues•88 pull requests•Updated Apr 10, 2026Apr 10, 2026

• grype-db

  Public
  sqlitevulnerabilityhacktoberfest+ 1

  sqlitevulnerabilityhacktoberfestgrype

  Python

  •

  Apache License 2.0

  •3333 forks•6565 stars•1111 issues•1313 pull requests•Updated Apr 10, 2026Apr 10, 2026

• go-make

  Public
  Go

  •

  Apache License 2.0

  •22 forks•00 stars•00 issues•88 pull requests•Updated Apr 10, 2026Apr 10, 2026

• ecs-inventory

  Public
  Anchore ECS Inventory can poll ECS Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

  Go

  •

  Apache License 2.0

  •55 forks•77 stars•00 issues•99 pull requests•Updated Apr 9, 2026Apr 9, 2026

• stereoscope

  Public
  go library for processing container images and simulating a squash filesystem

  gogolangcontainer+ 3

  gogolangcontainerhacktoberfestsquashfscontainer-image

  Go

  •

  Apache License 2.0

  •5858 forks•107107 stars•2121 issues•2727 pull requests•Updated Apr 9, 2026Apr 9, 2026

• homebrew-grype

  Public
  homebrew tap for grype

  Ruby

  •

  Apache License 2.0

  •22 forks•00 stars•00 issues•11 pull request•Updated Apr 9, 2026Apr 9, 2026

• vulnerability-match-labels

  Public
  Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners

  labelsdatasetvulnerabilities+ 1

  labelsdatasetvulnerabilitieshacktoberfest

  Python

  •

  Creative Commons Zero v1.0 Universal

  •1212 forks•1414 stars•44 issues•33 pull requests•Updated Apr 9, 2026Apr 9, 2026

• homebrew-syft

  Public
  homebrew tap for syft

  Ruby

  •

  Apache License 2.0

  •00 forks•22 stars•11 issue•11 pull request•Updated Apr 8, 2026Apr 8, 2026

• kubernetes-admission-controller

  Public
  Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

  Go

  •

  Apache License 2.0

  •2828 forks•6565 stars•1212 issues•88 pull requests•Updated Apr 8, 2026Apr 8, 2026