repositories used Dockerfiles
GitHub reported Dockerfile use grew 120% year over year in its 2025 dataset.
GitHub Octoverse 2025 · 2025 ↗Updated 2026-10-04 · Cloud native
Container security
adoption and scale statistics.
A source-first view of how widely the capability is used and how quickly its footprint is growing. Published findings provide context; the measurement framework shows what to calculate inside your own environment.
01 / Published evidence
What the public data says.
Each figure links directly to the organization that published it. Vendor telemetry and community surveys are labelled rather than blended into one invented industry average.
of container users ran Kubernetes in production
The CNCF annual survey reported production Kubernetes use rose from 66% in 2023.
CNCF Annual Cloud Native Survey · 2026 ↗machine-to-human identity ratio reported in cloud environments
Sysdig’s telemetry highlights how machine identities dominate modern cloud estates.
Sysdig Cloud-Native Security and Usage Report · 2025 ↗02 / Your baseline
Measure the system you actually run.
Use these formulas consistently for at least one complete operating cycle. Keep scope, exclusions and collection dates beside the result.
Managed coverage
Actively managed assets ÷ discovered assets × 100
Standard-path adoption
Workloads using the approved path ÷ eligible workloads × 100
Quarterly footprint change
(Current assets − prior-quarter assets) ÷ prior-quarter assets × 100
03 / Interpretation
A number without a denominator is decoration.
Segment results by environment, workload owner and business criticality. A falling average can hide one critical service getting worse; a rising count can simply reflect better discovery.
- Record the source system and collection window.
- Separate discovered, in-scope and actively managed populations.
- Keep medians and tail values where averages hide risk.
- Annotate architecture, policy and tooling changes.
- Recalculate after remediation instead of closing on intent.
Related benchmarks
Look at the adjacent signal.
Want these numbers from your cloud?
Gritt can map the data sources, calculate a defensible baseline and implement the changes behind it.
Build the baseline →