Anchore Enterprise v6.2 Released with Native AI Model Detection and Enhanced CRA Compliance

WHAT HAPPENED

Anchore released Enterprise v6.2 with native AI model detection, VEX-aware policy evaluation, an MCP Server for AI agent integration, outcome-change notifications, and severity-based package filtering.

WHO IS INVOLVED

Anchore, a software supply chain security vendor, announced the product update addressing the EU Cyber Resilience Act's September 11, 2026 deadline requiring 24-hour vulnerability reporting.

WHY IT MATTERS

AI models like GGUF files and Docker Models are now part of software supply chains but go unscanned by most tools, making native detection critical. The CRA compliance deadline creates immediate pressure for enterprises to meet regulatory vulnerability disclosure requirements.

Read more

• linkedin.com ↗