# How Syft Scans Software to Generate SBOMs

Syft is an open source CLI tool and Go library that generates a Software Bill of Materials (SBOM).  
[Read the Blog](https://anchore.com/blog/how-syft-scans-software-to-generate-sboms/)

# Beyond Software Dependencies: The Data Supply Chain Security Challenge of AI-Native Applications  
[Read the Blog](https://anchore.com/blog/beyond-software-dependencies-the-data-supply-chain-security-challenge-of-ai-native-applications/)

# EU CRA SBOM Requirements: Overview & Compliance Tips  
[Read the Blog](https://anchore.com/blog/eu-cra-sbom-requirements-overview-compliance-tips/)

# NIST 800-37, the Risk Management Framework: A Guide in Plain English  
[Read the Blog](https://anchore.com/blog/nist-800-37/)

# Compliance Operations: Making Kubernetes Audit-Ready by Design  
[Read the Blog](https://anchore.com/blog/compliance-operations-making-kubernetes-audit-ready-by-design/)

# Anchore Enterprise 5.26: Scaling SBOM Management and Increasing Ecosystem Coverage  
[Read the Blog](https://anchore.com/blog/anchore-enterprise-5-26/)

# Anchore Enterprise and the DoD DevSecOps Reference Design  
[Read the Blog](https://anchore.com/blog/anchore-enterprise-and-the-dod-devsecops-reference-design/)

# How Mattermost Automated Container Vulnerability Scanning with Anchore Enterprise  
[Read the Blog](https://anchore.com/blog/mattermost-container-vulnerability-scanning/)

# Container Vulnerability Management: Risks, Tips & Tools  
[Read the Blog](https://anchore.com/blog/container-vulnerability-management-risks-tips-tools/)

# Shift-left FAST: Supercharging Your CI Pipeline  
[Read the Blog](https://anchore.com/blog/shift-left-fast-supercharging-your-ci-pipeline/)

# CVE is saved, but there’s a lot of work to do  
[Read the Blog](https://anchore.com/blog/cve-is-saved-but-theres-work-to-do/)

# Anchore and Bitnami: Bridging the Data Gap for Accurate Image Scanning  
[Read the Blog](https://anchore.com/blog/anchore-bitnami-secure-images/)

# Neil Levine, Anchore | Chainguard Assemble 2026  
[Watch Now](https://anchore.com/videos/neil-levine-anchore-chainguard-assemble-2026/)

# Anchore Enterprise 5.25: Unified Scanning Engine and First-Class Imported SBOMs  
[Read the Blog](https://anchore.com/blog/anchore-enterprise-5-25/)

# A Guide to Continuous Compliance Monitoring in a Cloud-Native World  
[Read the Blog](https://anchore.com/blog/guide-to-continuous-compliance-monitoring/)

# The Sprawl Paradox: Why More SBOMs Can Mean Less Visibility  
[Read the Blog](https://anchore.com/blog/sbom-sprawl-paradox/)

# Top STIG Compliance Tools to Automate Security Configuration & Audits  
[Read the Blog](https://anchore.com/blog/top-stig-compliance-tools/)

# We have no crystal ball but we do have some directions for 2026  
[Read the Blog](https://anchore.com/blog/no-crystal-ball-but-2026-directions/)

# An Introduction to NIST’s Secure Software Development Framework  
[Read the Blog](https://anchore.com/blog/about-new-nist-ssdf/)

# The “S” in SBOM is for system  
[Read the Blog](https://anchore.com/blog/the-s-in-sbom-is-for-system/)

# Syft, Grype, Grant: Celebrating 50 Million Downloads  
[Read the Blog](https://anchore.com/blog/syft-grype-grant-50mill-downloads/)

# Securing the Mission: How Anchore Enterprise Powers DoW Zero Trust  
[Read the Blog](https://anchore.com/blog/anchore-enterprise-powers-dow-zero-trust/)

# The DoD SWFT Initiative and the Promise of cATO Fulfilled  
[Read the Blog](https://anchore.com/blog/dod-swft-initiative-and-promise-of-cato-fulfilled/)

# Beyond the Bottleneck: How RAISE 2.0 is Transforming Navy DevSecOps  
[Read the Blog](https://anchore.com/blog/how-raise-2-0-is-transforming-navy-devsecops/)

# Under the Hood: How Anchore’s Enterprise Vulnerability Feeds Keep You Secure  
[Read the Blog](https://anchore.com/blog/how-anchore-vulnerability-feeds-keep-you-secure/)

# STIG in Action: 4 Lessons on Automating Compliance with MITRE SAF  
[Read the Blog](https://anchore.com/blog/stig-in-action-4-lessons-on-automating-compliance-with-mitre-saf/)

# The Top Ten List: The 2025 Anchore Blog  
[Read the Blog](https://anchore.com/blog/the-top-ten-list-the-2025-anchore-blog/)

# Why SBOMs Are No Longer Optional in 2026  
[Read the Blog](https://anchore.com/blog/why-sboms-are-no-longer-optional-in-2025/)

# Anchore OSS Docs Have a New Home: Github → oss.anchore.com  
[Read the Blog](https://anchore.com/blog/anchore-oss-docs-have-a-new-home/)

# The Death of Manual SBOM Management and an Automated Future  
[Read the Blog](https://anchore.com/blog/the-death-of-manual-sbom-management-and-an-automated-future/)

# Beyond Cargo Audit: Securing Your Rust Crates in Container Images  
[Read the Blog](https://anchore.com/blog/beyond-cargo-audit-securing-your-rust-crates-in-container-images/)

# Anchore Enterprise 5.24: Native filesystem SBOMs and policy gates for BYOS  
[Read the Blog](https://anchore.com/blog/anchore-enterprise-5-24/)

# Start Safe, Stay Secure: How Anchore and Chainguard Libraries Strengthen Software Supply Chains  
[Read the Blog](https://anchore.com/blog/start-safe-stay-secure-anchore-and-chainguard-libraries/)

# 4 Lessons on the Future of Software Transparency from Steve Springett of CycloneDX  
[Read the Blog](https://anchore.com/blog/4-lessons-on-future-of-software-transparency-with-steve-springett/)