Anchore Container Scan for GitHub Actions

Deep inspection and analysis of container images, seamlessly integrated with existing development workflows

Find Vulnerabilities

Discover vulnerabilities in operating system or programming language packages before publishing container images

FEATURES

Security, Easily Integrated

Anchore can quickly be added to build processes using GitHub Actions. The Anchore Container Scan action invokes the inline version of Anchore Engine, which runs locally to scan Docker images and return a bill of materials, perform a policy evaluation and provide a final pass/fail build status.

DISCOVER

INSPECTION

Create a Bill of Materials

Anchore performs deep inspection of images, providing a complete list of OS and language packages contained within them

VULNERABILITIES

Fail Non-Conforming Builds

Using the Anchore Container Scan action, builds that contain high severity vulnerabilities or violate custom policies can be rejected

Resources For You

BACK TO TOP

CUSTOMIZE

Define Custom Policies

The default Anchore policy can be customized to enforce best practices, create whitelists, and define rejection criteria

Key Features That Matter

GitHub gets a lot of love from most developers, and the team here at Anchore are no exception.

Deemed worthy of its own top-level tab in every repo, Actions is GitHub’s newest tool for automating your software workflows with world-class CI/CD...

Announcing Anchore & GitHub Actions

READ MORE

BLOG

Anchore is going to show you how, with very little code, you can add robust security scanning, alerting and reporting to your existing GitHub projects.

First, go into your Github repository and find the Action tab; it should be about midway along..



A Tutorial On Anchore & GitHub Actions

READ MORE

BLOG

Image Scanning can be easily integrated into your GitHub Actions pipeline using the official Anchore Engine Scan Action.

You can quickly and easily access our documentation on how to use the action, which can be found in the official GitHub repository...

Integration & Docs: Anchore & GitHub Actions

READ MORE

DOCS

Helpful Information To Get You Up & Running

Watch The Video

Secure Container Workflows With Anchore and GitHub Actions

RESOURCESVIDEO