Issues

• Locked world entries put the repository tag after the version (name=version@tag), and apk add in the image then purges every package

  chainguard-dev/apko#2536 · Filter by author jackwhelpton opened on Sep 28, 2026

• examples/old-glibc.yaml fails: libssl3 3.6.4-r8 pulls in openssl-4.0 and conflicts on etc/ssl/openssl.cnf

  chainguard-dev/apko#2526 · Filter by author jmeridth opened on Sep 25, 2026

• APKINDEX round trip can change a package's name

  chainguard-dev/apko#2522 · Filter by author DrVelvetFog opened on Sep 24, 2026

• types: ImageContents.MarshalYAML redacts the caller's config in place

  chainguard-dev/apko#2496 · Filter by author coreydaley-cg opened on Sep 11, 2026

• tarfs: DirEntry.Type returns the full mode instead of the type bits

  chainguard-dev/apko#2495 · Filter by author coreydaley-cg opened on Sep 10, 2026

• tarfs: Open fails on hardlinks and on absolute symlinks

  chainguard-dev/apko#2494 · Filter by author coreydaley-cg opened on Sep 10, 2026

• tarfs: Entry retains a full tar.Header per file; store a compact record

  chainguard-dev/apko#2492 · Filter by author coreydaley-cg opened on Sep 10, 2026

• resolver cache retains a full package map per index combination; bound it by size or share the entries

  chainguard-dev/apko#2491 · Filter by author coreydaley-cg opened on Sep 10, 2026

• Measure compressionCache effectiveness; if it does not pay, revert to single-pass layer writes

  chainguard-dev/apko#2485 · Filter by author coreydaley-cg opened on Sep 9, 2026
  2

• TestSplitLayersDirectoryCreation: foundDirs accumulates across layers, so later layers can never fail

  chainguard-dev/apko#2484 · Filter by author coreydaley-cg opened on Sep 8, 2026

• ImageLayoutToLayer leaves its partial output file behind on build failure

  chainguard-dev/apko#2483 · Filter by author coreydaley-cg opened on Sep 8, 2026

• Data race in layer.Digest/layer.Size on the compression-cache hit path

  chainguard-dev/apko#2481 · Filter by author coreydaley-cg opened on Sep 8, 2026

• erofs: layered builds materialize every hardlink as a full copy

  chainguard-dev/apko#2451 · Filter by author smoser opened on Sep 1, 2026

• build: NewOptions returns an unvalidated ImageConfiguration, so an invalid layer format silently builds a tar

  chainguard-dev/apko#2423 · Filter by author stevebeattie opened on Aug 20, 2026

• EROFS follow-ups: mount/umount hardening, layer splitting, go-erofs bump

  chainguard-dev/apko#2408 · Filter by author smoser opened on Aug 18, 2026
  1

• DRAFT: RSA SHA1 signature support is insecure

  chainguard-dev/apko#2399 · Filter by author xnox opened on Aug 16, 2026
  3

• apko does not follow content-disposition headers when fetching key files

  chainguard-dev/apko#2252 · Filter by author fluix-dev opened on May 30, 2026

• Package index fetches fail if APKINDEX.tar.gz doesn't support HEAD requests (e.g. Gitea/Forgejo package repositories)

  chainguard-dev/apko#2251 · Filter by author fluix-dev opened on May 30, 2026

• feature request: lockfile support for minirootfs and cpio

  chainguard-dev/apko#2085 · Filter by author alexhaydock opened on Feb 22, 2026

• SBOM does not get built for minirootfs

  chainguard-dev/apko#2084 · Filter by author alexhaydock opened on Feb 22, 2026

• Ill-formed package index emitted

  chainguard-dev/apko#2059 · Filter by author Dichloromethane opened on Feb 5, 2026
  1

• installed db should be sorted

  chainguard-dev/apko#1969 · Filter by author xnox opened on Dec 7, 2025
  1

• Question about long-term support for baseimage in apko

  chainguard-dev/apko#1930 · Filter by author sfc-gh-ycho opened on Nov 10, 2025

• Key handling is ~backwards

  bug
  chainguard-dev/apko#1866 · Filter by author jonjohnsonjr opened on Sep 23, 2025
  1

• orphaned files are silently dropped from db/apk/installed

  chainguard-dev/apko#1810 · Filter by author smoser opened on Aug 12, 2025