ANCHORE,(1)

NAME
anchore, - manual page for anchore, version 1.1.0dev

SYNOPSIS
anchore [OPTIONS] COMMAND [ARGS]...

DESCRIPTION

    Anchore is a tool for analyzing, querying, and curating container images to deliver the transparency, predictability, and control necessary to use containers in production. Anchore is composed of a toolset that runs locally on a host as well as a web service that monitors the container ecosystem and provides inputs to the local toolset.

    The tool has capabilities to populate a registry, run analysis, explore/query the analysis results (including custom queries and checks), and run policy-based gate-functions against container images to help an ops team decide if a container should go into the CI/CD pipeline and on to production based on attributes of the Dockerfile, built image, or both.

    After installation, the first command run should be: 'anchore feeds list' to initialize the system and load feed data.

    Feeds are different types of data that the anchore web service makes available for certain container image queries and scans. At any point in time, you can use the 'anchore feeds' commands to sync the latest data from the anchore web service, subscribe and/or unsubscribe from anchore feeds, or get a list of available feeds. Except during feeds operations, no network connectivity is required by anchore to run analysis and query images.

    Configuration Files:

    Anchore configuration files are automatically installed if not found when looking in-order at: $HOME/.anchore/conf /etc/anchore

    A default install will copy the files to $HOME/.anchore/conf/, but they may be manually put in /etc/anchore for a system global config.

    * config.yaml - main configuration file. Used to override default values. Anchore will search for it in $HOME/.anchore/conf, then in /etc/anchore. If not found in either place, a new one is initilized and copied to $HOME/.anchore

    * anchore_gate.policy - The global gate policy file (see anchore-gate(1) for more help on gates).

    High-level example flows:

    Initialize the system and sync the by-default subscribed feed 'vulnerabilties':

    anchore feeds list anchore feeds sync

    Analyze an image

    docker pull nginx:latest anchore analyze --image nginx:latest --imagetype base

    Generate a summary report on all analyzed images

    anchore audit report

    Check gate output for nginx:latest:

    anchore gate --image nginx:latest

OPTIONS

--verbose
    Enable verbose output to stderr.

--debug
    Developer debug output to stderr.

--quiet
    Only errors to stderr, no status messages.

--json
    Output formatted json to stdout.

--plain
    Output formatted scriptable text to stdout.

--html
    Output formatted HTML table to stdout.

--config-override <config_opt>=<config_value>
    Override an anchore configuration option (can be used multiple times).

--version
    Show the version and exit.

--extended-help
    Show extended help content, similar to manpage, and exit.

--help
    Show this message and exit.

  Commands:

analyze
    Perform analysis on specified image IDs.

audit
    Commands to generate/review audit reports

feeds
    Manage syncing of and subscriptions to Anchore data feeds.

gate
    Perform and view gate evaluation on selected images

login
    Log in to the Anchore service.

logout
    Log out of the Anchore service.

query
    Run specified query (leave blank to show list).

system
    System level operations.

toolbox
    Useful tools and operations on images and containers

whoami
    Show user data for current logged-in user if available