Anchore is a container image management and analytics toolset that provides insight and control over container contents throughout the development and production lifecycles. It offers transparency by analyzing container images, predictability by certifying that images meet requirements, and control by enforcing security policies. Anchore is open source, highly extensible, works across platforms, appeals to developers as well as operations and security teams, and leverages data from public sources to analyze images for vulnerabilities, completeness, and policy compliance.

1. Deploy Containers with Confidence
ANDREW CATHROW | JULY 2016
Introduction to Anchore Project

2. 2
CONTAINERS
REPRESENT THE
FUTURE
Source: NGINX App Development survey, Nov 2015

3. 3
DEVELOPERS HAVE
OUTPACED
OPERATIONS AND
SECURITY

4. 4
NEW
SOFTWARE
SUPPLY CHAIN

5. 5
STRIKING
THE RIGHT
BALANCE

6. 6
Anchore is a container image management and analytics toolset. Anchore
provides you with insight and control over the contents of your containers from
the start of development all the way to production.
Deploy containers with confidence
Transparency
Uncover and track the contents of
application containers with a
consistent set of tools
Predictability
Start from a known set of certified
containers that have been vetted for
critical bugs, security vulnerabilities,
and functional completeness
Control
Apply operations and security best
practices through enforcement of
flexible policies at every stage in the
container lifecycle

7. 7
DEMOCRATIZATION OF
CERTIFICATION

8. 8
DEMOCRATIZATION OF
CERTIFICATION
MUST BE OPEN

9. 9
DEMOCRATIZATION OF
CERTIFICATION
MUST BE OPEN SOURCE

10. 10
WHAT IS
CERTIFICATION ?
MORE THAN JUST
SECURITY

11. KEY TENANTS
11
Open Open Source - allowing community effect to drive grassroots adoption, rapidly extend
feature set and to enable auditing to provide confidence.
Extensible Highly modular and extensible - allowing customers or 3rd parties to extend analysis,
reporting and policy modules.
Cross
Platform
Works with any container runtime on premise or in the cloud.
Not tightly linked to any individual runtime, CI/CD or orchestration platform.
Developer
Focused
With features that appeal to developers in addition to ops and security .
Data
Driven
Huge amount of data to collect and analyze from public and private container registries,
operating system distributors and package repositories.

12. On Premise
Registry
Public
Registries
Vendor
Registries
TYPICAL CONTAINER WORKFLOW

13. On Premise
Registry
Operations
& Security
Create / Modify
base image
Public
Registries
Vendor
Registries
TYPICAL CONTAINER WORKFLOW

14. Developer Apps
Build
TestOn Premise
Registry
Developer
TYPICAL CONTAINER WORKFLOW

15. Developer Apps
Build
On Premise
Registry
Developer
Deploy
Public
Cloud
On Premise
Servers
Test

16. Analyze
Pull containers from public
container registries
Collect vulnerability
data CVE/NVD etc
Anchore Cloud
Anchore
Database
CONTAINER WORKFLOW WITH ANCHORE

17. Anchore Cloud
Anchore
Database
Anchore
API{ }
Local
Anchore
Database
Sync
Subscription data
Operations
& Security
CONTAINER WORKFLOW WITH ANCHORE

18. Anchore Cloud
Anchore
Database
Anchore
API{ }
Local
Anchore
Database
Operations
& Security
Define Policies
CONTAINER WORKFLOW WITH ANCHORE

19. Anchore Cloud
Anchore
Database
Developer Apps
Build
Anchore
API{ }
Local
Anchore
Database
Developer
CONTAINER WORKFLOW WITH ANCHORE

20. Anchore Cloud
Anchore
Database
Developer Apps
Build
Analysis
modules
Anchore
API{ }
Local
Anchore
Database
Analyze
Developer
● Image metadata
● Package metadata
● File list
● File checksums
● SUID files
Default modules
CONTAINER WORKFLOW WITH ANCHORE

21. Anchore Cloud
Anchore
Database
Developer Apps
Build
Test
Analysis
modules
Anchore
API{ }
Local
Anchore
Database
Analyze
Developer
CONTAINER WORKFLOW WITH ANCHORE

22. Anchore Cloud
Anchore
Database
Developer Apps
Build
Analysis
modules
Anchore
API{ }
Local
Anchore
Database
Analyze
Developer
Gate
modules
Evaluate
Test
● Dockerfile check
● Package checks
● File SUID checks
● CVE Checks
Default modules
CONTAINER WORKFLOW WITH ANCHORE

23. Anchore Cloud
Anchore
Database
Developer Apps
Build
Analysis
modules
Anchore
API{ }
Local
Anchore
Database
Analyze
Developer
Gate
modules
Evaluate
On Premise
Registry
Test

24. Anchore Cloud
Anchore
Database
Anchore
API{ }
Local
Anchore
Database
Query
modules
Query
● Gate checks
● Package queries
● File queries
● Base image queries
Default modules
CONTAINER WORKFLOW WITH ANCHORE

25. Anchore Cloud
Anchore
Database
Developer Apps
Build
Test
Analysis
modules
Anchore
API{ }
Local
Anchore
Database
Analyze
Sync
Subscription data
Developer
Gate
modules
Evaluate
On Premise
Registry
Operations
& Security
Define Policies

26. DEMO - OPEN SOURCE ENGINE
26

27. MOVING FORWARD
27
Work with open source community
Provide commercial offering with expanded set of
modules, integrations and data feeds
BETA this summer

28. Deploy Containers with Confidence
GITHUB.COM/ANCHORE
@ANCHORE
WWW.ANCHORE.COM
INFO@ANCHORE.COM