Anchore Enterprise Release Notes - Version 6.2.2
Anchore Enterprise v6.2.2
Enterprise Service
Anchore Enterprise v6.2.2 is a maintenance release for v6.2.
Requirements
- Anchore Enterprise v6.x requires PostgreSQL 17 or greater with the pg_cron extension installed and accessible by Anchore Enterprise. Pre-flight checks verify at startup that the database version and required extensions are working correctly, and the deployment will fail to start if these requirements are not met.
- SBOM ingestion in v6.x drives larger parallel query plans against PostgreSQL, which use dynamic shared memory
(
/dev/shmon Linux). Docker’s default tmpfs of 64 MiB is insufficient for typical SBOM workloads. Operators running PostgreSQL on Kubernetes or self-managed hosts should size/dev/shmto at least 1 GiB - see Shared Memory for full guidance. Managed databases (Amazon RDS, Aurora) are unaffected.
Fixes
- Fixes an issue where adding several images at the same time could fail with an HTTP 500 error, leaving an image in
the
analysis_failedstate, when the account had more than one Amazon ECR registry configured. The failure affected every image added by that account, including images that do not come from ECR. Each image add no longer rewrites the account’s stored ECR credentials unless the ECR token has actually expired. - Fixes an issue where listing the vulnerabilities of an Application Version through the API, or listing the packages
affected by a vulnerability, failed with an HTTP 500 error when the results included Go vulnerabilities.
- The
kindfield on eachfix_versionsentry is now a string on the responses ofGET /v2/apps/{app_id}/versions/{version_id}/vulnerabilitiesandGET /v2/apps/{app_id}/versions/{version_id}/packages-by-vulnerability.
- The
- The AnchoreCTL build distributed with the Enterprise image is now v6.2.3 - see the AnchoreCTL v6.2.3 release notes for the full description.
Recommended Component Versions
| Component | Supported Version | Helm Chart Version | Additional Info |
|---|---|---|---|
| Enterprise | v6.2.2 | v4.4.2 | With Syft v1.51.0 and Grype v0.116.1 |
| Enterprise UI | v6.2.0 | ||
| AnchoreCTL | v6.2.3 | Deploying AnchoreCTL | |
| Anchore ECS Inventory | v1.5.2 | v0.1.1 | https://github.com/anchore/ecs-inventory |
| Anchore Kubernetes Inventory | v1.8.6 | v0.7.1 | https://github.com/anchore/k8s-inventory |
| Kubernetes Admission Controller | v0.8.6 | v0.9.1 | https://github.com/anchore/kubernetes-admission-controller |
| Jenkins Plugin | v3.3.0 | https://plugins.jenkins.io/anchore-container-scanner | |
| Harbor Scanner Adapter | v1.5.5 | https://github.com/anchore/harbor-scanner-adapter |
Anchore Helm Chart can be found at https://github.com/anchore/anchore-charts
Syft Release Notes can be found at https://github.com/anchore/syft/releases/tag/v1.51.0
Grype Release Notes can be found at https://github.com/anchore/grype/releases/tag/v0.116.1
Last modified October 12, 2026