ANCHORE,(1)

NAME
anchore, - manual page for anchore, version 0.9.0

SYNOPSIS
anchore [OPTIONS] COMMAND [ARGS]...

DESCRIPTION

    Anchore is a tool for analyzing, querying, and curating container images to deliver the transparency, predictability, and control necessary to use containers in production. Anchore is composed of a toolset that runs locally on a host as well as a web service that monitors the container ecosystem and provides inputs to the local toolset.

    The tool has capabilities to populate a registry, run analysis, explore/query the analysis results (including custom queries and checks), and run policy-based gate-functions against container images to help an ops team decide if a container should go into the CI/CD pipeline and on to production based on attributes of the Dockerfile, built image, or both.

    After installation, the first command run must be: 'anchore sync catalog' to initialize the system and load subscription data.

    Subscriptions are lists of container images (e.g. ubuntu:latest, centos:7, nginx:latest), that anchore will automatically fetch from docker hub during a catalog sync to keep up-to-date and will also download the latest analysis data on those images from the anchore web service. Except during a sync, no network connectivity is required by anchore to run analysis and query images.

    Configuration Files:

    Anchore configuration files are automatically installed if not found when looking in-order at: $HOME/.anchore/conf /etc/anchore

    A default install will copy the files to $HOME/.anchore/conf/, but they may be manually put in /etc/anchore for a system global config.

    * config.yaml - main configuration file. Used to override default values. Anchore will search for it in $HOME/.anchore/conf, then in /etc/anchore. If not found in either place, a new one is initilized and copied to $HOME/.anchore

    * anchore_gate.policy - The global gate policy file (see anchore-gate(1) for more help on gates).

    High-level example flows:

    Initialize the system and subscribe to 'ubuntu' image:

    anchore sync catalog anchore subscriptions add ubuntu anchore sync catalog

    Generate a summary report on all analyzed images

    anchore explore report

    Check gate output for nginx:latest:

    anchore gate --image nginx:latest

OPTIONS

--verbose
    Enable verbose output to stderr.

--debug
    Developer debug output to stderr.

--quiet
    Only errors to stderr, no status messages.

--json
    Output formatted json to stdout.

--plain
    Output formatted scriptable text to stdout.

--version
    Show the version and exit.

--extended-help
    Show extended help content, similar to manpage, and exit.

--help
    Show this message and exit.

  Commands:

analyze
    Perform analysis on specified image IDs.

explore
    Search, report and query specified image IDs.

gate
    Perform and view gate evaluation on selected images

subscriptions
    Manage local subscriptions.

sync
    Synchronize images and metadata

system
    Anchore system-level operations, which do not...

toolbox
    Useful tools and operations on images and containers