Adopters

Our tools are used by organisations and developer teams of all sizes. Below is a small sample of users of our tools, in public GitHub repositories.

Docker

SAP

Grafana

OpenTelemetry

Wolfi

Kubescape

More organisations below are all adopters of our tools, in public GitHub repositories.

Syft

Repository	Stars
derailed / k9s	31025
kubescape / kubescape	10979
anchore / grype	10629
deepfence / ThreatMapper	5142
zarf-dev / zarf	1651
vdaas / vald	1636
helm / chart-testing	1561
lunasec-io / lunasec	1456
openclarity / openclarity	1427
guacsec / guac	1406
SAP / jenkins-library	800
helm / chart-releaser	760
safedep / vet	729
in-toto / witness	494
xeol-io / xeol	409
project-stacker / stacker	289
slsa-framework / slsa-verifier	282
ckotzbauer / sbom-operator	206
gitpod-io / leeway	169
go-sigma / sigma	167
docker / sbom-cli-plugin	156
vulncheck-oss / cli	139
agntcy / dir	108
anchore / grant	104
ckotzbauer / vulnerability-operator	85
wolfi-dev / wolfictl	67
agntcy / workflow-srv-mgr	60
Checkmarx / ast-cli	57
bottlerocket-os / bottlerocket-sdk	56
sammcj / mcp-devtools	55
anchore / grype-db	54

Grype

Repository	Stars
derailed / k9s	31025
kubescape / kubescape	10979
deepfence / ThreatMapper	5142
zarf-dev / zarf	1651
vdaas / vald	1636
lunasec-io / lunasec	1456
openclarity / openclarity	1427
xeol-io / xeol	409
slsa-framework / slsa-verifier	282
gitpod-io / leeway	169
ckotzbauer / vulnerability-operator	85
wolfi-dev / wolfictl	67
sammcj / mcp-devtools	55
anchore / grype-db	54

SBOM Action

Repository	Stars
n8n-io / n8n	136966
caddyserver / caddy	66730
ultralytics / ultralytics	45473
grafana / k6	28717
grafana / loki	26408
SigNoz / signoz	23479
cilium / cilium	22428
jaegertracing / jaeger	21847
getsops / sops	19369
nats-io / nats-server	18185
stackblitz-labs / bolt.diy	17813
goreleaser / goreleaser	15102
App-vNext / Polly	13956
kubescape / kubescape	10979
orhun / git-cliff	10777
anchore / grype	10629
loft-sh / vcluster	10585
dexidp / dex	10175
fission / fission	8737
Workiva / go-datastructures	7837
anchore / syft	7598
fluxcd / flux2	7409
k8sgpt-ai / k8sgpt	6938
kubevela / kubevela	6834
gopasspw / gopass	6462
podman-desktop / podman-desktop	6450
external-secrets / external-secrets	5817
open-telemetry / opentelemetry-collector	5773
inventree / InvenTree	5721
apache / nifi	5660
domaindrivendev / Swashbuckle.AspNetCore	5407
fluxcd / flagger	5152
nginx / kubernetes-ingress	4817
grafana / tempo	4738
jenkins-x / jx	4664
openbao / openbao	4482
openfga / openfga	4087
cerbos / cerbos	4039
modelcontextprotocol / registry	3589
version-fox / vfox	3529
orhun / binsider	3403
mpromonet / webrtc-streamer	3389
orhun / kmon	2782
dragonflyoss / dragonfly	2772
akuity / kargo	2694
kube-vip / kube-vip	2531
IBM / mcp-context-forge	2412
goreleaser / nfpm	2395
ory / polis	2137
badtuxx / girus-cli	2103
mpromonet / v4l2rtspserver	1969
projectcapsule / capsule	1925
artifacthub / hub	1905
ublue-os / bluefin	1887
nginx / nginx-prometheus-exporter	1855
stefanprodan / timoni	1852
keptn / keptn	1789
regclient / regclient	1632
kubewall / kubewall	1573
helm / chart-testing	1561
kubeshop / testkube	1494
flux-iac / tofu-controller	1486
project-copacetic / copacetic	1424
guacsec / guac	1406
OWASP / SecurityShepherd	1402
orhun / systeroid	1384
charmbracelet / wishlist	1371
trueforge-org / truecharts	1270
dimonomid / nerdlog	1261
aserto-dev / topaz	1257
containerd / runwasi	1208
abhimanyu003 / sttr	1182
kitops-ml / kitops	1180
stacklok / toolhive	1164
k8gb-io / k8gb	1074
minicli / minicli	1063
lensesio / stream-reactor	1038
sigstore / gitsign	1020
jonrau1 / ElectricEye	1010
gnolang / gno	989
orhun / rustypaste	971
open-cluster-management-io / ocm	957
controlplaneio / simulator	956
cBioPortal / cbioportal	853
percona / pmm	838
intigriti / misconfig-mapper	816
updatecli / updatecli	792
kluctl / kluctl	788
helm / chart-releaser	760
open-feature / flagd	758
orhun / halp	750
poweradmin / poweradmin	729
flux-subsystem-argo / flamingo	706
caarlos0 / svu	697
getprobo / probo	686
opea-project / GenAIExamples	682
nuxeo / nuxeo	673
nginx / nginx-gateway-fabric	668
glasskube / distr	647
falcosecurity / falcosidekick	619
orhun / linuxwave	601
devops-kung-fu / bomber	576
epinio / epinio	559
editorconfig-checker / editorconfig-checker	548
microsoft / call-center-ai	531
clemlesne / scrape-it-now	525
in-toto / witness	494
caioricciuti / ch-ui	463
kubestellar / kubestellar	463
fluxcd / helm-controller	457
anchore / quill	455
kyverno / chainsaw	437
retracedhq / retraced	412
keptn / lifecycle-toolkit	400
open-telemetry / opentelemetry-collector-releases	388
k8sgpt-ai / k8sgpt-operator	387
pcasteran / terraform-graph-beautifier	387
controlplaneio / netassert	377
justeattakeaway / httpclient-interception	376
tbckr / sgpt	370
NLeSC / mcfly	365
controlplaneio-fluxcd / flux-operator	355
mindersec / minder	349
ublue-os / aurora	341
wanghaisheng / tiktoka-studio-uploader	331
jkroepke / openvpn-auth-oauth2	329
ahmetb / gen-crd-api-reference-docs	325
rad-security / kbom	318
Lissy93 / domain-locker	313
caarlos0 / domain_exporter	313
stefanprodan / kustomizer	296
martincostello / xunit-logging	293
avisi-cloud / structurizr-site-generatr	293
home-operations / containers	292
kexa-io / Kexa	290
compozy / compozy	290
ahoy-cli / ahoy	281
notaryproject / ratify	278
udx / wp-stateless	268
gatewayd-io / gatewayd	266
spr-networks / super	266
sgl-project / ome	265
fluxcd / kustomize-controller	265
fluxcd / source-controller	257
nicholas-fedor / watchtower	251
martincostello / sqllocaldb	251
open-feature / open-feature-operator	251
digitalghost-dev / premier-league	246
KWasm / kwasm-operator	237
au2001 / icloud-passwords-firefox	236
mitre / heimdall2	235
FDio / govpp	232
micro-lc / micro-lc	221
Hyperledger-TWGC / tape	220
hazcod / ransomwhere	212
SchwarzIT / go-template	200
mostafa / xk6-kafka	193
snyk / parlay	191
fluxcd / image-automation-controller	187
muhlba91 / pulumi-proxmoxve	184
defenseunicorns / pepr	181
dirien / minectl	178
plgd-dev / hub	173
opea-project / GenAIComps	172
cerberauth / vulnapi	172
roots / trellis-cli	169
rond-authz / rond	162
mitre / saf	162
fluxcd / notification-controller	162
docker / sbom-cli-plugin	156
chainguard-dev / incert	156
soraro / kurt	154
jauderho / dockerfiles	154
elastic / harp	152
stacklok / frizbee	150
jkroepke / access-log-exporter	147
sigstore / policy-controller	142
kaansk / shomon	131
laoshanxi / app-mesh	128
philips-software / amp-devcontainer	125
openimsdk / chat	125
falcosecurity / falcosidekick-ui	124
Workiva / built_redux	123
OpenUnison / openunison-k8s	123
Hive-Academy / Anubis-MCP	122
hemilabs / heminetwork	122
asymmetric-research / solana-exporter	119
holos-run / holos	116
fluxcd / image-reflector-controller	116
dirien / minecraft-prometheus-exporter	116
bomctl / bomctl	115
homeall / caddy-reverse-proxy-cloudflare	109
civiform / civiform	109
html2rss / html2rss-web	108
SAP / terraform-provider-btp	106
descope / descopecli	103
raffis / gitops-zombies	103
sigstore / timestamp-authority	102
IAreKyleW00t / docker-caddy-cloudflare	101
ossf / sbom-everywhere	101
autobrr / mkbrr	101
raffis / mongodb-query-exporter	101
shopware / shopware-cli	98
salrashid123 / gce_metadata_server	98
caarlos0 / twitter-cleaner	97
pteich / elastic-query-export	96
dwisiswant0 / unch	94
martincostello / openapi-extensions	92
actinia-org / actinia-core	92
caddyserver / gateway	92
OpenZeppelin / openzeppelin-relayer	89
AlbrechtL / openwrt-docker	89
OpenZeppelin / openzeppelin-monitor	88
caarlos0 / jsonfmt	88
kyverno / kyverno-json	86
cardinalhq / lakerunner	85
microsoft / terraform-provider-fabric	85
intelops / compage	85
openfga / cli	82
schednex-ai / schednex	81
0x61nas / aarty	81
erfianugrah / revista-3	80
some-natalie / kubernoodles	80
Workiva / opentelemetry-dart	79
mitre / vulcan	78
devops-kung-fu / hookz	78
sigstore / cosign-gatekeeper-provider	78
certonid / certonid	77
PurpleBooth / git-mit	76
wimpysworld / stream-sprout	76
cpanato / github_actions_exporter	76
fystack / mpcium	74
Workiva / dart_dev	74
gearnode / privatebin	74
crashappsec / github-analyzer	72
shini4i / argo-watcher	69
alegrey91 / fwdctl	69
phoban01 / cue-flux-controller	69
stackabletech / spark-k8s-operator	66
Workiva / state_machine	65
tektronix / tm_devices	65
mchmarny / vimp	65
sigstore / helm-sigstore	65
saas-factory-labs / Saas-Factory	64
Workiva / dart_codemod	64
SigNoz / signoz-otel-collector	64
ICTU / quality-time	63
anchore / chronicle	63
peak-scale / sops-operator	63
gembaadvantage / uplift	63
yurishkuro / microsim	62
tuannvm / mcp-trino	60
opensearch-project / opensearch-migrations	60
redhat-certification / chart-verifier	59
muhlba91 / external-dns-provider-adguard	59
ilijamt / vault-plugin-secrets-gitlab	59
gopasspw / git-credential-gopass	58
stackabletech / trino-operator	58
goreleaser / example-supply-chain	58
metal-stack / firewall-controller	57
grafana / grafana-opentelemetry-dotnet	57
apigee / apigeecli	57
theparanoids / crypki	57
go-faster / oteldb	57
nginx / nginx-asg-sync	57
ultralytics / thop	56
ublue-os / bluefin-lts	55
theopenlane / core	55
JSchmie / ScrAIbe	54
akuity / kargo-render	54
sapcc / ntp_exporter	54
engity-com / bifroest	54
spinframework / runtime-class-manager	54
dirien / pulumi-fly	53
FalcoSuessgott / vault-kubernetes-kms	52
justeattakeaway / JustSaying	51
teler-sh / teler-proxy	51
xmlking / grpc-starter-kit	50
philips-labs / slsa-provenance-action	50

Scan Action

Repository	Stars
ClickHouse / ClickHouse	42822
airbytehq / airbyte	19470
bitwarden / server	17139
docker-mailserver / docker-mailserver	17053
ory / hydra	16505
goreleaser / goreleaser	15102
elastic / logstash	14628
wazuh / wazuh	13461
Unstructured-IO / unstructured	12634
ory / kratos	12294
bitwarden / clients	11220
cookieY / Yearning	8763
flowable / flowable-engine	8706
gopasspw / gopass	6462
photoview / photoview	6128
fastrepl / hyprnote	6082
apache / nifi	5660
0xERR0R / blocky	5601
nuclio / nuclio	5572
ory / keto	5111
freedomofpress / dangerzone	4239
ory / oathkeeper	3426
chaskiq / chaskiq	3400
determined-ai / determined	3187
deepseek-ai / DreamCraft3D	2969
buildpacks / pack	2799
akuity / kargo	2694
sakai135 / wsl-vpnkit	2639
submariner-io / submariner	2568
Checkmarx / kics	2469
onekey-sec / unblob	2354
11notes / docker-kms	2010
nginx / nginx-prometheus-exporter	1855
cloudfoundry / cli	1844
GIScience / openrouteservice	1711
mlrun / mlrun	1588
openremote / openremote	1510
TheresAFewConors / Sooty	1425
py-pdf / fpdf2	1363
wahyd4 / aria2-ariang-docker	1093
jonrau1 / ElectricEye	1010
mixcore / mix.core	873
kanisterio / kanister	840
Unstructured-IO / unstructured-api	808
mendhak / docker-http-https-echo	727
voxpupuli / puppetboard	726
kool-dev / kool	708
Threagile / threagile	692
getprobo / probo	686
hipages / php-fpm_exporter	681
nuxeo / nuxeo	673
nginx / nginx-gateway-fabric	668
estahn / k8s-image-swapper	611
ThomasVitale / cloud-native-spring-in-action	538
shenxn / protonmail-bridge-docker	534
opentracing-contrib / nginx-opentracing	507
bitwarden / self-host	506
grafana / grafana-image-renderer	437
BallAerospace / COSMOS	372
bitwarden / sdk-sm	336
wanghaisheng / tiktoka-studio-uploader	331
rad-security / kbom	318
interledger / rafiki	315
adrianbrad / queue	314
home-operations / containers	292
RAJANAGORI / Nightingale	288
banzaicloud / thanos-operator	281
cnoe-io / idpbuilder	275
udx / wp-stateless	268
waldo-vision / waldo	254
Secure-Compliance-Solutions-LLC / GVM-Docker	251
tarampampam / mikrotik-hosts-parser	248
digitalghost-dev / premier-league	246
sstarcher / helm-exporter	246
istio-ecosystem / authservice	236
signalfx / splunk-otel-collector	223
buildpacks / lifecycle	198
defenseunicorns / pepr	181
righettod / toolbox-pentest-web	166
MustacheCase / zanadir	165
11notes / docker-socket-proxy	164
ilteoood / docker-surfshark	161
OpenC3 / cosmos	156
jauderho / dockerfiles	154
jedisct1 / dnscrypt-server-docker	145
artefactory / NLPretext	140
michelin / kstreamplify	132
submariner-io / lighthouse	130
11notes / docker-adguard	122
11notes / docker-kms-gui	119
submariner-io / submariner-operator	119
11notes / docker-traefik	115
Soneji / docker-chromium	115
alex1989hu / kubelet-serving-cert-approver	113
banzaicloud / jwt-to-rbac	113
DataDog / datadog-lambda-extension	109
azinchen / nordvpn	108
anweiss / cddl	106
cfpb / hmda-platform	104
madereddy / noisy	104
WeblateOrg / docker	103
michelin / ns4kafka	94
Chr157i4n / PyTmcStepper	92
HHS / simpler-grants-gov	91
OpenZeppelin / openzeppelin-relayer	89
tarampampam / tinifier	89
OpenZeppelin / openzeppelin-monitor	88
bitwarden / mcp-server	86
UKHomeOffice / kd	85
HariSekhon / GitHub-Actions	81
some-natalie / kubernoodles	80
ThomasVitale / spring-cloud-gateway-resilience-security-observability	77
wimpysworld / stream-sprout	76
astrolabsoftware / fink-broker	72
werbot / lime	72
Ortus-Solutions / docker-commandbox	66
tektronix / tm_devices	65
ortus-boxlang / BoxLang	65
mchmarny / vimp	65
XGovFormBuilder / digital-form-builder	64
analysys / ans-android-sdk	64
pegasystems / docker-pega-web-ready	61
gopasspw / gopass-jsonapi	59
redhat-certification / chart-verifier	59
Altinity / ClickHouse	59
datagrok-ai / public	58
theparanoids / crypki	57
submariner-io / shipyard	56
kube-tarian / tarian	56
cogini / phoenix_container_example	55
cogini / phoenix_container_example_old	55
singlestore-labs / singlestoredb-dev-image	55
JSchmie / ScrAIbe	54
ryaneorth / k8s-scheduled-volume-snapshotter	54
michelin / suricate	52
SmartTokenLabs / attestation	51
adlnet / CATAPULT	50

Generated using github-dependents-info, by Nicolas Vuillamy"