Experimental News Clipping Site

Tag: Syft

  • Anchore: Analyzing the top MCP Docker Containers

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/analyzing-the-top-mcp-docker-containers/ Source: Anchore Title: Analyzing the top MCP Docker Containers Feedly Summary: If you pay attention to the world of AI, you’ll have noticed that Model Context Protocol (MCP) is a very popular topic right now. The Model Context Protocol is an open standard that enables developers to build secure, two-way connections between…

  • Anchore: Can an LLM Really Fix a Bug? A Start-to-Finish Case Study

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/can-an-llm-really-fix-a-bug-a-start-to-finish-case-study/ Source: Anchore Title: Can an LLM Really Fix a Bug? A Start-to-Finish Case Study Feedly Summary: The software industry faces a growing problem: we have far more open issues than we have contributors multiplied by available time. Every project maintainer knows this pain. We certainly recognize this across our open source tools…

  • Anchore: Strengthening Software Security: The Anchore and Chainguard Partnership

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/chainguard-partnership/ Source: Anchore Title: Strengthening Software Security: The Anchore and Chainguard Partnership Feedly Summary: In 2018, Anchore partnered with the US Air Force on Platform One, a project focused on integrating DevSecOps principles into government software development. A core part of that project was the launch of the Iron Bank, a repository of…

  • Anchore: Anchore is Excited to Announce it’s Inclusion in the IBM PDE Factory: An Open Source-Powered Secure Software Development Platform

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/anchore-is-excited-to-announce-its-inclusion-in-the-ibm-pde-factory-an-open-source-powered-secure-software-development-platform/ Source: Anchore Title: Anchore is Excited to Announce it’s Inclusion in the IBM PDE Factory: An Open Source-Powered Secure Software Development Platform Feedly Summary: Powered by Anchore’s Syft & Grype, IBM’s Platform Development Environment Factory delivers DevSecOps-as-a-Service for federal agencies seeking operational readiness without the integration nightmare. Federal agencies are navigating a…

  • Anchore: SBOM Generation Step-by-Step: Anchore Learning Week (Day 2)

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/sbom-generation-step-by-step-anchore-learning-week-day-2/ Source: Anchore Title: SBOM Generation Step-by-Step: Anchore Learning Week (Day 2) Feedly Summary: Welcome to day 2 of our 5-part series on Software Bills of Materials (SBOMs). In our previous post, we covered the basics of SBOMs and why they’re essential for modern software security. Now, we’re ready to roll up our…

  • Anchore: Generating SBOMs for JavaScript Projects: A Developer’s Guide

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/javascript-sbom-generation/ Source: Anchore Title: Generating SBOMs for JavaScript Projects: A Developer’s Guide Feedly Summary: Let’s be honest: modern JavaScript projects can feel like a tangled web of packages. Knowing exactly what’s in your final build is crucial, especially with rising security concerns. That’s where a Software Bill of Materials (SBOM) comes in handy…

  • Anchore: Making Virtual Machine Security Analysis Easier with sbom-vm

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/making-virtual-machine-security-analysis-easier-with-sbom-vm/ Source: Anchore Title: Making Virtual Machine Security Analysis Easier with sbom-vm Feedly Summary: Security professionals often need to analyze the contents of virtual machines (VMs) to generate Software Bills of Materials (SBOMs). This seemingly straightforward task can become surprisingly complex. I’d like to introduce sbom-vm, a prototype tool I created to simplify…

  • Anchore: Generating Python SBOMs: Using pipdeptree and Syft

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/python-sbom-generation/ Source: Anchore Title: Generating Python SBOMs: Using pipdeptree and Syft Feedly Summary: SBOM (software bill of materials) generation is becoming increasingly important for software supply chain security and compliance. Several approaches exist for generating SBOMs for Python projects, each with its own strengths. In this post, we’ll explore two popular methods: using…

  • Anchore: Syft 1.20: Faster Scans, Smarter License Detection, and Enhanced Bitnami Support

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/syft-1-20-faster-scans-smarter-license-detection-and-enhanced-bitnami-support/ Source: Anchore Title: Syft 1.20: Faster Scans, Smarter License Detection, and Enhanced Bitnami Support Feedly Summary: We’re excited to announce Syft v1.20.0! If you’re new to the community, Syft is Anchore’s open source software composition analysis (SCA) and SBOM generation tool that provides foundational support for software supply chain security for modern…