OSS Adopters

Adopters of Anchore Open Source Tools

Our tools are used by organisations and developer teams of all sizes. Below is a small sample of users of our tools, in public GitHub repositories.

No adopters data found. Check your data file.

More organisations below are all adopters of our tools, in public GitHub repositories.

Syft

Repository Stars
  derailed / k9s 31025
  kubescape / kubescape 10979
  anchore / grype 10629
  deepfence / ThreatMapper 5142
  zarf-dev / zarf 1651
  vdaas / vald 1636
  helm / chart-testing 1561
  lunasec-io / lunasec 1456
  openclarity / openclarity 1427
  guacsec / guac 1406
  SAP / jenkins-library 800
  helm / chart-releaser 760
  safedep / vet 729
  in-toto / witness 494
  xeol-io / xeol 409
  project-stacker / stacker 289
  slsa-framework / slsa-verifier 282
  ckotzbauer / sbom-operator 206
  gitpod-io / leeway 169
  go-sigma / sigma 167
  docker / sbom-cli-plugin 156
  vulncheck-oss / cli 139
  agntcy / dir 108
  anchore / grant 104
  ckotzbauer / vulnerability-operator 85
  wolfi-dev / wolfictl 67
  agntcy / workflow-srv-mgr 60
  Checkmarx / ast-cli 57
  bottlerocket-os / bottlerocket-sdk 56
  sammcj / mcp-devtools 55
  anchore / grype-db 54

Grype

Repository Stars
  derailed / k9s 31025
  kubescape / kubescape 10979
  deepfence / ThreatMapper 5142
  zarf-dev / zarf 1651
  vdaas / vald 1636
  lunasec-io / lunasec 1456
  openclarity / openclarity 1427
  xeol-io / xeol 409
  slsa-framework / slsa-verifier 282
  gitpod-io / leeway 169
  ckotzbauer / vulnerability-operator 85
  wolfi-dev / wolfictl 67
  sammcj / mcp-devtools 55
  anchore / grype-db 54

SBOM Action

Repository Stars
  n8n-io / n8n 136966
  caddyserver / caddy 66730
  ultralytics / ultralytics 45473
  grafana / k6 28717
  grafana / loki 26408
  SigNoz / signoz 23479
  cilium / cilium 22428
  jaegertracing / jaeger 21847
  getsops / sops 19369
  nats-io / nats-server 18185
  stackblitz-labs / bolt.diy 17813
  goreleaser / goreleaser 15102
  App-vNext / Polly 13956
  kubescape / kubescape 10979
  orhun / git-cliff 10777
  anchore / grype 10629
  loft-sh / vcluster 10585
  dexidp / dex 10175
  fission / fission 8737
  Workiva / go-datastructures 7837
  anchore / syft 7598
  fluxcd / flux2 7409
  k8sgpt-ai / k8sgpt 6938
  kubevela / kubevela 6834
  gopasspw / gopass 6462
  podman-desktop / podman-desktop 6450
  external-secrets / external-secrets 5817
  open-telemetry / opentelemetry-collector 5773
  inventree / InvenTree 5721
  apache / nifi 5660
  domaindrivendev / Swashbuckle.AspNetCore 5407
  fluxcd / flagger 5152
  nginx / kubernetes-ingress 4817
  grafana / tempo 4738
  jenkins-x / jx 4664
  openbao / openbao 4482
  openfga / openfga 4087
  cerbos / cerbos 4039
  modelcontextprotocol / registry 3589
  version-fox / vfox 3529
  orhun / binsider 3403
  mpromonet / webrtc-streamer 3389
  orhun / kmon 2782
  dragonflyoss / dragonfly 2772
  akuity / kargo 2694
  kube-vip / kube-vip 2531
  IBM / mcp-context-forge 2412
  goreleaser / nfpm 2395
  ory / polis 2137
  badtuxx / girus-cli 2103
  mpromonet / v4l2rtspserver 1969
  projectcapsule / capsule 1925
  artifacthub / hub 1905
  ublue-os / bluefin 1887
  nginx / nginx-prometheus-exporter 1855
  stefanprodan / timoni 1852
  keptn / keptn 1789
  regclient / regclient 1632
  kubewall / kubewall 1573
  helm / chart-testing 1561
  kubeshop / testkube 1494
  flux-iac / tofu-controller 1486
  project-copacetic / copacetic 1424
  guacsec / guac 1406
  OWASP / SecurityShepherd 1402
  orhun / systeroid 1384
  charmbracelet / wishlist 1371
  trueforge-org / truecharts 1270
  dimonomid / nerdlog 1261
  aserto-dev / topaz 1257
  containerd / runwasi 1208
  abhimanyu003 / sttr 1182
  kitops-ml / kitops 1180
  stacklok / toolhive 1164
  k8gb-io / k8gb 1074
  minicli / minicli 1063
  lensesio / stream-reactor 1038
  sigstore / gitsign 1020
  jonrau1 / ElectricEye 1010
  gnolang / gno 989
  orhun / rustypaste 971
  open-cluster-management-io / ocm 957
  controlplaneio / simulator 956
  cBioPortal / cbioportal 853
  percona / pmm 838
  intigriti / misconfig-mapper 816
  updatecli / updatecli 792
  kluctl / kluctl 788
  helm / chart-releaser 760
  open-feature / flagd 758
  orhun / halp 750
  poweradmin / poweradmin 729
  flux-subsystem-argo / flamingo 706
  caarlos0 / svu 697
  getprobo / probo 686
  opea-project / GenAIExamples 682
  nuxeo / nuxeo 673
  nginx / nginx-gateway-fabric 668
  glasskube / distr 647
  falcosecurity / falcosidekick 619
  orhun / linuxwave 601
  devops-kung-fu / bomber 576
  epinio / epinio 559
  editorconfig-checker / editorconfig-checker 548
  microsoft / call-center-ai 531
  clemlesne / scrape-it-now 525
  in-toto / witness 494
  caioricciuti / ch-ui 463
  kubestellar / kubestellar 463
  fluxcd / helm-controller 457
  anchore / quill 455
  kyverno / chainsaw 437
  retracedhq / retraced 412
  keptn / lifecycle-toolkit 400
  open-telemetry / opentelemetry-collector-releases 388
  k8sgpt-ai / k8sgpt-operator 387
  pcasteran / terraform-graph-beautifier 387
  controlplaneio / netassert 377
  justeattakeaway / httpclient-interception 376
  tbckr / sgpt 370
  NLeSC / mcfly 365
  controlplaneio-fluxcd / flux-operator 355
  mindersec / minder 349
  ublue-os / aurora 341
  wanghaisheng / tiktoka-studio-uploader 331
  jkroepke / openvpn-auth-oauth2 329
  ahmetb / gen-crd-api-reference-docs 325
  rad-security / kbom 318
  Lissy93 / domain-locker 313
  caarlos0 / domain_exporter 313
  stefanprodan / kustomizer 296
  martincostello / xunit-logging 293
  avisi-cloud / structurizr-site-generatr 293
  home-operations / containers 292
  kexa-io / Kexa 290
  compozy / compozy 290
  ahoy-cli / ahoy 281
  notaryproject / ratify 278
  udx / wp-stateless 268
  gatewayd-io / gatewayd 266
  spr-networks / super 266
  sgl-project / ome 265
  fluxcd / kustomize-controller 265
  fluxcd / source-controller 257
  nicholas-fedor / watchtower 251
  martincostello / sqllocaldb 251
  open-feature / open-feature-operator 251
  digitalghost-dev / premier-league 246
  KWasm / kwasm-operator 237
  au2001 / icloud-passwords-firefox 236
  mitre / heimdall2 235
  FDio / govpp 232
  micro-lc / micro-lc 221
  Hyperledger-TWGC / tape 220
  hazcod / ransomwhere 212
  SchwarzIT / go-template 200
  mostafa / xk6-kafka 193
  snyk / parlay 191
  fluxcd / image-automation-controller 187
  muhlba91 / pulumi-proxmoxve 184
  defenseunicorns / pepr 181
  dirien / minectl 178
  plgd-dev / hub 173
  opea-project / GenAIComps 172
  cerberauth / vulnapi 172
  roots / trellis-cli 169
  rond-authz / rond 162
  mitre / saf 162
  fluxcd / notification-controller 162
  docker / sbom-cli-plugin 156
  chainguard-dev / incert 156
  soraro / kurt 154
  jauderho / dockerfiles 154
  elastic / harp 152
  stacklok / frizbee 150
  jkroepke / access-log-exporter 147
  sigstore / policy-controller 142
  kaansk / shomon 131
  laoshanxi / app-mesh 128
  philips-software / amp-devcontainer 125
  openimsdk / chat 125
  falcosecurity / falcosidekick-ui 124
  Workiva / built_redux 123
  OpenUnison / openunison-k8s 123
  Hive-Academy / Anubis-MCP 122
  hemilabs / heminetwork 122
  asymmetric-research / solana-exporter 119
  holos-run / holos 116
  fluxcd / image-reflector-controller 116
  dirien / minecraft-prometheus-exporter 116
  bomctl / bomctl 115
  homeall / caddy-reverse-proxy-cloudflare 109
  civiform / civiform 109
  html2rss / html2rss-web 108
  SAP / terraform-provider-btp 106
  descope / descopecli 103
  raffis / gitops-zombies 103
  sigstore / timestamp-authority 102
  IAreKyleW00t / docker-caddy-cloudflare 101
  ossf / sbom-everywhere 101
  autobrr / mkbrr 101
  raffis / mongodb-query-exporter 101
  shopware / shopware-cli 98
  salrashid123 / gce_metadata_server 98
  caarlos0 / twitter-cleaner 97
  pteich / elastic-query-export 96
  dwisiswant0 / unch 94
  martincostello / openapi-extensions 92
  actinia-org / actinia-core 92
  caddyserver / gateway 92
  OpenZeppelin / openzeppelin-relayer 89
  AlbrechtL / openwrt-docker 89
  OpenZeppelin / openzeppelin-monitor 88
  caarlos0 / jsonfmt 88
  kyverno / kyverno-json 86
  cardinalhq / lakerunner 85
  microsoft / terraform-provider-fabric 85
  intelops / compage 85
  openfga / cli 82
  schednex-ai / schednex 81
  0x61nas / aarty 81
  erfianugrah / revista-3 80
  some-natalie / kubernoodles 80
  Workiva / opentelemetry-dart 79
  mitre / vulcan 78
  devops-kung-fu / hookz 78
  sigstore / cosign-gatekeeper-provider 78
  certonid / certonid 77
  PurpleBooth / git-mit 76
  wimpysworld / stream-sprout 76
  cpanato / github_actions_exporter 76
  fystack / mpcium 74
  Workiva / dart_dev 74
  gearnode / privatebin 74
  crashappsec / github-analyzer 72
  shini4i / argo-watcher 69
  alegrey91 / fwdctl 69
  phoban01 / cue-flux-controller 69
  stackabletech / spark-k8s-operator 66
  Workiva / state_machine 65
  tektronix / tm_devices 65
  mchmarny / vimp 65
  sigstore / helm-sigstore 65
  saas-factory-labs / Saas-Factory 64
  Workiva / dart_codemod 64
  SigNoz / signoz-otel-collector 64
  ICTU / quality-time 63
  anchore / chronicle 63
  peak-scale / sops-operator 63
  gembaadvantage / uplift 63
  yurishkuro / microsim 62
  tuannvm / mcp-trino 60
  opensearch-project / opensearch-migrations 60
  redhat-certification / chart-verifier 59
  muhlba91 / external-dns-provider-adguard 59
  ilijamt / vault-plugin-secrets-gitlab 59
  gopasspw / git-credential-gopass 58
  stackabletech / trino-operator 58
  goreleaser / example-supply-chain 58
  metal-stack / firewall-controller 57
  grafana / grafana-opentelemetry-dotnet 57
  apigee / apigeecli 57
  theparanoids / crypki 57
  go-faster / oteldb 57
  nginx / nginx-asg-sync 57
  ultralytics / thop 56
  ublue-os / bluefin-lts 55
  theopenlane / core 55
  JSchmie / ScrAIbe 54
  akuity / kargo-render 54
  sapcc / ntp_exporter 54
  engity-com / bifroest 54
  spinframework / runtime-class-manager 54
  dirien / pulumi-fly 53
  FalcoSuessgott / vault-kubernetes-kms 52
  justeattakeaway / JustSaying 51
  teler-sh / teler-proxy 51
  xmlking / grpc-starter-kit 50
  philips-labs / slsa-provenance-action 50

Scan Action

Repository Stars
  ClickHouse / ClickHouse 42822
  airbytehq / airbyte 19470
  bitwarden / server 17139
  docker-mailserver / docker-mailserver 17053
  ory / hydra 16505
  goreleaser / goreleaser 15102
  elastic / logstash 14628
  wazuh / wazuh 13461
  Unstructured-IO / unstructured 12634
  ory / kratos 12294
  bitwarden / clients 11220
  cookieY / Yearning 8763
  flowable / flowable-engine 8706
  gopasspw / gopass 6462
  photoview / photoview 6128
  fastrepl / hyprnote 6082
  apache / nifi 5660
  0xERR0R / blocky 5601
  nuclio / nuclio 5572
  ory / keto 5111
  freedomofpress / dangerzone 4239
  ory / oathkeeper 3426
  chaskiq / chaskiq 3400
  determined-ai / determined 3187
  deepseek-ai / DreamCraft3D 2969
  buildpacks / pack 2799
  akuity / kargo 2694
  sakai135 / wsl-vpnkit 2639
  submariner-io / submariner 2568
  Checkmarx / kics 2469
  onekey-sec / unblob 2354
  11notes / docker-kms 2010
  nginx / nginx-prometheus-exporter 1855
  cloudfoundry / cli 1844
  GIScience / openrouteservice 1711
  mlrun / mlrun 1588
  openremote / openremote 1510
  TheresAFewConors / Sooty 1425
  py-pdf / fpdf2 1363
  wahyd4 / aria2-ariang-docker 1093
  jonrau1 / ElectricEye 1010
  mixcore / mix.core 873
  kanisterio / kanister 840
  Unstructured-IO / unstructured-api 808
  mendhak / docker-http-https-echo 727
  voxpupuli / puppetboard 726
  kool-dev / kool 708
  Threagile / threagile 692
  getprobo / probo 686
  hipages / php-fpm_exporter 681
  nuxeo / nuxeo 673
  nginx / nginx-gateway-fabric 668
  estahn / k8s-image-swapper 611
  ThomasVitale / cloud-native-spring-in-action 538
  shenxn / protonmail-bridge-docker 534
  opentracing-contrib / nginx-opentracing 507
  bitwarden / self-host 506
  grafana / grafana-image-renderer 437
  BallAerospace / COSMOS 372
  bitwarden / sdk-sm 336
  wanghaisheng / tiktoka-studio-uploader 331
  rad-security / kbom 318
  interledger / rafiki 315
  adrianbrad / queue 314
  home-operations / containers 292
  RAJANAGORI / Nightingale 288
  banzaicloud / thanos-operator 281
  cnoe-io / idpbuilder 275
  udx / wp-stateless 268
  waldo-vision / waldo 254
  Secure-Compliance-Solutions-LLC / GVM-Docker 251
  tarampampam / mikrotik-hosts-parser 248
  digitalghost-dev / premier-league 246
  sstarcher / helm-exporter 246
  istio-ecosystem / authservice 236
  signalfx / splunk-otel-collector 223
  buildpacks / lifecycle 198
  defenseunicorns / pepr 181
  righettod / toolbox-pentest-web 166
  MustacheCase / zanadir 165
  11notes / docker-socket-proxy 164
  ilteoood / docker-surfshark 161
  OpenC3 / cosmos 156
  jauderho / dockerfiles 154
  jedisct1 / dnscrypt-server-docker 145
  artefactory / NLPretext 140
  michelin / kstreamplify 132
  submariner-io / lighthouse 130
  11notes / docker-adguard 122
  11notes / docker-kms-gui 119
  submariner-io / submariner-operator 119
  11notes / docker-traefik 115
  Soneji / docker-chromium 115
  alex1989hu / kubelet-serving-cert-approver 113
  banzaicloud / jwt-to-rbac 113
  DataDog / datadog-lambda-extension 109
  azinchen / nordvpn 108
  anweiss / cddl 106
  cfpb / hmda-platform 104
  madereddy / noisy 104
  WeblateOrg / docker 103
  michelin / ns4kafka 94
  Chr157i4n / PyTmcStepper 92
  HHS / simpler-grants-gov 91
  OpenZeppelin / openzeppelin-relayer 89
  tarampampam / tinifier 89
  OpenZeppelin / openzeppelin-monitor 88
  bitwarden / mcp-server 86
  UKHomeOffice / kd 85
  HariSekhon / GitHub-Actions 81
  some-natalie / kubernoodles 80
  ThomasVitale / spring-cloud-gateway-resilience-security-observability 77
  wimpysworld / stream-sprout 76
  astrolabsoftware / fink-broker 72
  werbot / lime 72
  Ortus-Solutions / docker-commandbox 66
  tektronix / tm_devices 65
  ortus-boxlang / BoxLang 65
  mchmarny / vimp 65
  XGovFormBuilder / digital-form-builder 64
  analysys / ans-android-sdk 64
  pegasystems / docker-pega-web-ready 61
  gopasspw / gopass-jsonapi 59
  redhat-certification / chart-verifier 59
  Altinity / ClickHouse 59
  datagrok-ai / public 58
  theparanoids / crypki 57
  submariner-io / shipyard 56
  kube-tarian / tarian 56
  cogini / phoenix_container_example 55
  cogini / phoenix_container_example_old 55
  singlestore-labs / singlestoredb-dev-image 55
  JSchmie / ScrAIbe 54
  ryaneorth / k8s-scheduled-volume-snapshotter 54
  michelin / suricate 52
  SmartTokenLabs / attestation 51
  adlnet / CATAPULT 50

Generated using github-dependents-info, by Nicolas Vuillamy"

Last modified October 10, 2025: fix reference links (1594d93)