Zero-day investigations rely on historical SBOM data. Will you be ready when threats require next-gen SBOMs you never collected? Anchore Enterprise 5.20 = SPDX 3.0 storage now. ➡️ https://anchore.com/blog/anchore-enterprise-is-now-spdx-3-ready/ #SBOM #SupplyChainSecurity

For #security teams and engineers looking to build a secure #softwaresupplychain, this article in The New Stack features Josh Bressers talking about the latest CISA #SBOM guidance. His insights and more 👉 https://thenewstack.io/openssf-experts-weigh-in-on-cisas-sbom-minimum-elements-update/

Tomorrow is the day! We're teaming up with Chainguard to discuss continuous compliance for containerized environments. We'll show you ho... https://events.chainguard.dev/02c6031d-d65b-417d-b62d-858f53c144f5/?utm_medium=referral&utm_source=anchore&utm_campaign=FY26-GL-LW-ChainguardxAnchoreWebinar2025

The rising number of CVEs and regulations makes securing your software supply chain challenging. The new Anchore-Chainguard partnership addresses this by combining Chainguard's purpose-built, hardened container images with Anchore's continuous scann... https://anchore.com/blog/chainguard-partnership

Anchore and Chainguard have partnered to improve #supplychainsecurity. Our collaboration integrates Chainguard's minimal, zero-CVE container images with Anchore's policy and scanning framework to help you "start safe, stay sec... https://anchore.com/press/chainguard-partnership-supply-chain-security

Stop guessing what "GPL-ish" means. Grant groups licenses by risk so you can approve/deny in seconds. One list, not fifty rules. 👉 https://anchore.com/blog/grants-release-0-3-0-smarter-policies-faster-scans-and-simpler-compliance/ #OpenSource #SupplyChainSecurity #Compliance #DevSecOps

Don't just generate SBOMs. Use them to: ✅ Control risk ✅ Enforce policy ✅ Prove compliance Anchore Enterprise 5.20 makes it possible—with SPDX 3.0 support. ➡️ https://anchore.com/blog/anchore-enterprise-is-now-spdx-3-ready/ #SBOM #SupplyChainSecurity

Managing open-source license compliance is key for supply chain security. Watch our webinar on the latest Grant release to see how new features improve accuracy, performance, and risk analysis. https://www.youtube.com/watch?v=RVyryb8f5GQ #SBOM #Compliance #licenses

⏳ The best defense is preparation. Our on-demand webinar explores how SBOMs provide a foundational layer of visibility for the inevitable zero-day. ➡️ Want to see how SBOMs work for a zero day? Watch here: https://go.anchore.com/rapid-incident-response-with-sboms/

Your dependency tree has secrets 🔍 Unlicensed packages hiding in plain sight. GPL licenses that could "infect" your proprietary code. Grant 0.3.0 finds them before they find you: → 90% improvem... https://anchore.com/blog/grants-release-0-3-0-smarter-policies-faster-scans-and-simpler-compliance/

Join Chainguard and Anchore for a deep dive on "Establishing Continuous Compliance with Anchore & Chainguard: Automating Container Secur... https://events.chainguard.dev/02c6031d-d65b-417d-b62d-858f53c144f5/?utm_medium=referral&utm_source=anchore&utm_campaign=FY26-GL-LW-ChainguardxAnchoreWebinar2025

The SBOM landscape is splitting into two worlds: 📦 Traditional software inventories 🕸️ Next-gen system risk orchestration Smart organizations are preparing for both. Anchore Enterprise 5.20 enables dual-track SBOM manage... https://anchore.com/blog/anchore-enterprise-is-now-spdx-3-ready/ #SBOM

🚨 It's day #2 of DevOpsDays Washington, DC. Visit the Anchore booth for a live demo with our engineers. We'll show you how to proactively reduce risk and increase transparency in your software supply chain. PLUS register to win a Land Rover Lego set!

T-1 hour reminder! Join us for a live demo and technical chat on Grant 0.3.0 - our OSS license scanner and reporting tool. Main maintainer Chris Phillips will be introducing the latest features such as: * Explicit "No License" Detection * Enhanced Go... https://go.anchore.com/whats-new-in-grant.html

TOMORROW 🚨 Join our #webinar for policies, packages, and performance with Grant, the #opensource license scanner. Learn about the new features designed to provide you with more precise control and visibility over your software supply chain ➡️ https://go.anchore.com/whats-new-in-grant.html

Have you stopped by the Anchore booth at DevOpsDays DC? We're giving away a Land Rover Classic Defender Lego set to one lucky attendee. Stop by the booth to register and win. And maybe talk #SBOMs too! #devopsdays

Today is Day #1 at #devopsdays in Washington, DC 🥳 Stop by the Anchore booth and learn how to use SBOMs to increase transparency and reduce risk in your #software supply chain. PLUS register to win a Land Rover Classic Defender Lego set - we're giving away one set to a lucky show attendee!

Find license landmines before they find you. Grant 0.3.0 flags "no-license" by default + turns policy into plain English. Faster, stricter, ... https://anchore.com/blog/grants-release-0-3-0-smarter-policies-faster-scans-and-simpler-compliance/ #OpenSource #SupplyChainSecurity #Compliance #DevSecOps

The power of open source in action! This week, the community merged PRs enhancing CycloneDX support, GraalVM tracking, and more. Shoutout to contributors from Snowflake, Oracle, and Chainguard! See what ... https://anchorecommunity.discourse.group/t/anchore-open-source-weekly-report-week-37-2025/560

Most vendors generate SBOMs. Anchore manages the entire lifecycle—from generation to compliance to enforcement. ➡️ https://anchore.com/blog/anchore-enterprise-is-now-spdx-3-ready/ #SBOM #SupplyChainSecurity

Every industry has compliance standards: ✅ Food safety ✅ Auto safety ✅ Medical devices ✅ Financial services ❓ Software We were the exception. Until now. Welcome to adulthood, software industry. It was bound to happen eventually. ... https://anchore.com/blog/navigating-the-new-compliance-frontier/

Another fantastic week of community collaboration! Huge thanks to contributors from Snowflake, Oracle, and Yahoo! for their valuable PRs to our open-source tools. Read the full report: https://anchorecommunity.discourse.group/t/anchore-open-source-weekly-report-week-37-2025/560 #opensource #security

For #security teams and engineers looking to build a secure #softwaresupplychain, this article in The New Stack features Josh Bressers, talking about the latest CISA #SBOM guidance. His insights and more 👉 https://thenewstack.io/openssf-experts-weigh-in-on-cisas-sbom-minimum-elements-update/

🧭 Policies, packages, and performance. We're tackling all three in our #webinar about Grant, the #opensource license scanner. Learn about the new features designed to provide you with more precise visibility over your software supply chain ➡️ https://go.anchore.com/whats-new-in-grant.html

Calling all DC-based security engineers 👋 This week we're at DevOpsDays DC. Come say hi and get a live demo of our SBOM-powered #software composition analysis tool. More info: https://devopsdays.org/events/2025-washington-dc/welcome/#software#devopsdays

Popular NPM packages were compromised with malware on Sep 8. After internal audit: no Anchore products affected. Both Enterprise and Grype detect these packages via GitHub Advisory Database. Manual... https://anchore.com/blog/npm-supply-chain-breach-response-for-anchore-enterprise-and-grype-users/

For #security teams and engineers looking to build a secure #softwaresupplychain, this article in The New Stack features Josh Bressers, talking about the latest CISA #SBOM guidance. His insights and more 👉 https://thenewstack.io/openssf-experts-weigh-in-on-cisas-sbom-minimum-elements-update/

Tired of compliance being a roadblock? Join us on Sept... #FedRAMP, #PCIDSS, #HIPAA, #SOC2 https://events.chainguard.dev/02c6031d-d65b-417d-b62d-858f53c144f5/?utm_medium=referral&utm_source=anchore&utm_campaign=FY26-GL-LW-ChainguardxAnchoreWebinar2025#FedRAMP#PCIDSS#HIPAA#SOC2#DevSecOps #Cybersecurity #SupplyChainSecurity

If you write code, buy software, or run apps (so... everyone in 2025), everything you know about software development is changing. The "move fast and break things" era is now "move fast and document everything." What's your compli... https://anchore.com/blog/navigating-the-new-compliance-frontier/

🧭 Join us for our upcoming webinar and learn how our new release with Grant can streamline your #software security workflows with rule-based package exclusion, for big improvements to performance and accuracy. Save your seat ➡️ https://go.anchore.com/whats-new-in-grant.html#software#SoftwareSupplyChain

Is your team struggling with one these dreaded acronyms... https://events.chainguard.dev/02c6031d-d65b-417d-b62d-858f53c144f5/?utm_medium=referral&utm_source=anchore&utm_campaign=FY26-GL-LW-ChainguardxAnchoreWebinar2025 #DevSecOps #SupplyChainSecurity #Cybersecurity #Compliance #Chainguard #Anchore

Want to know how to automate #compliance for tricky security standards? Join the Anchore team next week in Washington, DC, for a live demo. See firsthand how SBOMs can reduce risk and increase transparency across your #software supply chai... https://devopsdays.org/events/2025-washington-dc/welcome/

Got a question about #opensource licensing? Join our webinar on Sept. 18, we'll walk you through new features in Grant, including explicit "No License" detection and enhanced cataloging for Go modules. Bring your tough questions—we'll have a live Q&A ➡️ https://go.anchore.com/whats-new-in-grant.html

Grype just got a little smarter! New updates mean fewer false positives and more accurate vulnerability scans. Big thanks to our community for the contributions that make it happen. #Grype #VulnerabilityScanner #FalsePositives

Remember when software compliance was just a sternly worded letter you could ignore? Now it's market access requirements with real teeth. EU CRA ≠ suggestions NIST SSDF ≠ recommendations Medical device regs ≠ guidelines New blog ... https://anchore.com/blog/navigating-the-new-compliance-frontier/

Anchore's open source projects, including Syft & Grype, made solid progress this week! We're focused on improving vulnerability detection and reliability. #SBOM #VulnerabilityScanning #OpenSource

🚨 Navigating #opensource licenses and supply chain risk just got easier. We're hosting a #webinar on the latest updates to Grant, our OSS license scanner. Explore new features like "no license" detection and enhanced Go module cataloging, join us 👉 https://go.anchore.com/whats-new-in-grant.html

Another week, another open source report from Anchore. This one highlights key improvements in Grype for more accurate vulnerability scans and how community contributions are helping us. #DevSecOps #OpenSource #SupplyChainSecurity

Zero-day incidents like Log4Shell highlight the need for a better way to respond. This on-demand webinar explains how an SBOM-powered approach helps go from discovering a new vuln to creating a remediation list in minutes. https://go.anchore.com/rapid-incident-response-with-sboms/ #SBOM

Syft & Grype have hit 40 million downloads! A massive thank you to the open source community for trusting us to secure their software supply chains. #OpenSource #SBOM #DevSecOps https://anchore.com/opensource

Missed our Open Source stream? Catch the recording to hear about the latest Syft, Grype, and roadmap updates! #SBOM #VulnerabilityScanning

We're LIVE! Join the Anchore Open Source team now to discuss Syft, Grype, and the latest in #OpenSourceSecurity. Ask your questions!

We're live in 5 minutes! Join the Anchore Open Source team now for an interactive discussion on our tools and roadmap.

Going live in 1 hour! Tune into the Anchore Open Source stream for all things Syft, Grype, & open source security. #OpenSource

Tomorrow! Get ready for our Anchore Open Source live stream at 12 PM PT. Dive into Syft, Grype, and more. Don't miss out! #DevSecOps

JSON-based policies + Git integration = Compliance workflows that actually work with DevOps 🔧 https://anchore.com/platform/enforce/ #PolicyAsCode #DevSecOps #Compliance

Manual compliance = development bottlenecks Automated policy enforcement = seamless workflows The difference? Policy as Code that: → Maps to requirements → Halts pipelines on violations → Ad... https://anchore.com/blog/meeting-2025s-sbom-compliance-deadlines-a-practical-implementation-guide-pt-2/

Join the Anchore Open Source team this Thursday at 12 PM PT for our live stream! We'll cover issues, PRs, & roadmap. #SBOM #Vulnerability

Huge congratulations to the Bluefin project on being selected for the #GitHub Secure Open Source Fund! We're proud to see them using our tool, Syft, to generate #SBOMs and enhance their security posture. https://docs.projectbluefin.io/blog/2025/08/29/github-oss-fund/

When auditors ask for compliance reports: ❌ Scramble for weeks gathering data ✅ Log into dashboard with real-time insights Organizations that chose automation months ago are experiencing this... https://anchore.com/blog/meeting-2025s-sbom-compliance-deadlines-a-practical-implementation-guide-pt-2/