Top all-time · #4137
Anchore
Company blog · anchore.com/blogsecuritysystems
Anchore is the company blog at anchore.com, writing about security and systems. Since 2016, 19 different Hacker News readers have linked it 44 times, most often “NIST NVD hasn't enriched CVEs for over a month”. It is still writing: the last post was on 2026-10-27, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Anchore's blog posts on vulnerability databases and container images, including the NVD backlog, how often Debian images update, and building a Grype vulnerability database.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Anchore's software supply chain solutions automate vulnerability scanning, strengthen container security, and support compliance with NIST, FedRAMP & more.
Most-linked posts?
- NIST NVD hasn't enriched CVEs for over a month2 people · 2 mentions · first linked 2024-03-17
- Extending Anchore Container Image Analysis with Lynis Scanning Tool2 people · 2 mentions · first linked 2016-07-19
What Hacker News says?
> I wonder what level of compartmentalisation inside DHS means they didn't see this as having sufficient downsides? The National Vulnerability Database has been unable to keep up with the flow of CVEs for over a year now: - https://anchore.com/blog/national-vulnerability-database-opa... - https://www.cyberreport.io/news/cve-backlog-update-the-nvd-s... - https://www.ibm.com/think/insights/cve-backlog-update-nvd-st...…
Comment linking /blog/national-vulnerability-database-opaque-changes-and-unanswered-questions/
on “CVE program faces swift end after DHS fails to renew contract [updated]”Submitted Using Anchore to scan for CVEs and vulnerabilities in docker images as a story · 7 points
HN discussionIn addition to the "minimalist" aspect, this image seems to offer better practices on a security level than official Debian images. From their README: "The images are built daily and have the security release enabled, so will contain any security updates released more than 24 hours ago." A recent analysis showed that the debian:latest image is "updated roughly every month" https://anchore.com/blog/look-often-docker-…
Comment linking /blog/look-often-docker-images-updated/
on “Minideb – A small image based on Debian designed for use in containers”Submitted An open policy hub for Docker security and compliance as a story · 6 points
HN discussionThis is a very interesting point, the vulnerability scan tool used on the article is this one: https://github.com/anchore/grype-db/blob/main/DEVELOPING.md and here you can see how it works: https://anchore.com/blog/build-your-own-grype-database As you can see there is a database specifically designed for Debian to take in charge the naming convention.
Comment linking /blog/build-your-own-grype-database
on “Have we reached a point of no return on managing software dependencies?”Submitted Docker Security Best Practices: Part 3 – Securing Container Images as a story · 3 points
HN discussionSubmitted The Anchore open source project as a story · 3 points
HN discussionSubmitted Anchore 1.1 is here with image subscription and support for Ruby Gems/Alpine Linux as a story · 3 points
HN discussionSubmitted Extending Anchore Container Image Analysis with Lynis Scanning Tool as a story · 3 points
HN discussionSubmitted Supply Chain Security made the OWASP Top Ten, this changes nothing as a story · 2 points
HN discussionSubmitted NIST NVD hasn't enriched CVEs for over a month as a story · 2 points
HN discussionSubmitted Open Source Is Bigger Than You Can Imagine as a story · 2 points
HN discussionSubmitted Docker Security Best Practices: Part 4 – Runtime Security as a story · 2 points
HN discussionSubmitted How Often Are Docker Images Updated – Revisited as a story · 2 points
HN discussionSubmitted Certifying container images isn't 1 size fits all. Do it on your own terms as a story · 2 points
HN discussionSubmitted Differences in CVE reporting for Docker containers? as a story · 2 points
HN discussionSubmitted Keeping Secrets – Our approach to secrets management and docker image security as a story · 2 points
HN discussionSubmitted Hanlon's Razor for Docker Containers as a story · 2 points
HN discussionSubmitted See all Node.js NPM's installed in your container images as a story · 2 points
HN discussionSubmitted Integrating Anchore OSS container image validation engine with Jenkins as a story · 2 points
HN discussionSubmitted Is Docker More Secure Than VM's? as a story · 2 points
HN discussionSubmitted Using Anchore's Open Source Container Validation Engine with Jenkins as a story · 2 points
HN discussionSubmitted Howto: Add Lynis scanning to Anchore container analysis as a story · 2 points
HN discussionSubmitted Using Anchore Open Source CLI Tool for Container Image Management and Analysis as a story · 2 points
HN discussionSubmitted How to Solve SBoM Sprawl: From Static Files to Vex and Automation as a story · 1 points
HN discussionSubmitted Say Goodbye to False Positives as a story · 1 points
HN discussionSubmitted Build Your Own Grype (vuln) Database as a story · 1 points
HN discussionSubmitted Myths of Open Source Software Risk and the One Nobody Is Discussing as a story · 1 points
HN discussionSubmitted A Breakdown of Operating Systems of Dockerhub as a story · 1 points
HN discussionSubmitted A Look at How Often Docker Images Are Updated as a story · 1 points
HN discussion