Securing and managing the software supply chain. Proud parent of @syft@fosstodon.org and @grype@fosstodon.org
Anchore SBOM Score = CVSS + EPSS + KEV status 📊
Because not all vulnerabilities are created equal ⚠️
https://anchore.com/platform/sbom/
#SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps
#Security and #compliance teams need visibility into every software component. An #SBOM provides that transparency—mapping dependencies, identifying vulnerabilities, and ensuring compliance. Learn how to implement SBOMs in your workflow: https://get.anchore.com/sbom101-guide-for-devsecops-community/
Standard scanners often fail to identify package-level #EOL risks. In this joint session, Anchore and HeroDevs will demonstrate how to track Distribution (OS) EOL and utilize specific EOL data sources to find #vulnerabilities in legacy codebases. Join us on February 25 for technical discussions and hands on demos.
Register now https://go.anchore.com/solve-the-end-of-life-trap-herodevs-anchore.html
Stop chasing a "zero CVE" dashboard.
In 2026, the real winners won't be the ones with the fewest vulnerabilities, they'll be the ones with the fastest upgrade engines.
We break down the new playbook for supply chain security: https://anchore.com/blog/no-crystal-ball-but-2026-directions/
"Transparency is the path to minimizing risk."
Whether it's a satellite or a financial app, you can't mitigate what you can't see. Kate Stewart (The Linux Foundation) breaks down the future of system-level visibility on the Anchore blog.
How to add vulnerability scanning to developer tools?
@RepoFlow's pattern:
Security without friction: https://anchore.com/blog/security-without-friction-how-repoflow-created-a-devsecops-package-manager-with-grype/
