Anchore Enterprise v6.3 is now available

WHAT HAPPENED

Anchore released Enterprise v6.3, adding four new capabilities to its software supply chain security platform. The update introduces Quick Package Search, Ubuntu ESM support, vulnerability change notifications, and a packages policy gate for AI models.

WHO IS INVOLVED

Anchore developed and released the new version of its Enterprise product for security teams managing software vulnerabilities and supply chain risks.

HOW IT WORKS

Quick Package Search identifies affected packages before a CVE exists or when no CVE is published. Ubuntu ESM support evaluates images against ESM fix data to prevent already-patched packages from appearing vulnerable. Vulnerability change notifications alert teams when CVSS scores, severity ratings, EPSS, or KEV status changes. The packages policy gate can fail or warn when AI models in GGUF or Docker formats are found in application versions.

WHY IT MATTERS

Security teams spend hours answering basic questions about package locations, finding validity, and triage status when new advisories arrive. These features automate answers to those questions, reducing mean time to response and improving the efficiency of vulnerability management workflows for organizations managing complex software environments.

Read more

• linkedin.com ↗