All issues

Search results

tarfs: Entry retains a full tar.Header per file; store a compact record

Status: Open.

#2492 In chainguard-dev/apko;

· coreydaley-cg opened on Sep 10, 2026

resolver cache retains a full package map per index combination; bound it by size or share the entries

Status: Open.

#2491 In chainguard-dev/apko;

· coreydaley-cg opened on Sep 10, 2026

Measure compressionCache effectiveness; if it does not pay, revert to single-pass layer writes

Status: Open.

#2485 In chainguard-dev/apko;

· coreydaley-cg opened on Sep 9, 2026

TestSplitLayersDirectoryCreation: foundDirs accumulates across layers, so later layers can never fail

Status: Open.

#2484 In chainguard-dev/apko;

· coreydaley-cg opened on Sep 8, 2026

ImageLayoutToLayer leaves its partial output file behind on build failure

Status: Open.

#2483 In chainguard-dev/apko;

· coreydaley-cg opened on Sep 8, 2026

Data race in layer.Digest/layer.Size on the compression-cache hit path

Status: Open.

#2481 In chainguard-dev/apko;

· coreydaley-cg opened on Sep 8, 2026

erofs: layered builds materialize every hardlink as a full copy

Status: Open.

#2451 In chainguard-dev/apko;

· smoser opened on Sep 1, 2026

build: NewOptions returns an unvalidated ImageConfiguration, so an invalid layer format silently builds a tar

Status: Open.

#2423 In chainguard-dev/apko;

· stevebeattie opened on Aug 20, 2026

EROFS follow-ups: mount/umount hardening, layer splitting, go-erofs bump

Status: Open.

#2408 In chainguard-dev/apko;

· smoser opened on Aug 18, 2026

DRAFT: RSA SHA1 signature support is insecure

Status: Open.

#2399 In chainguard-dev/apko;

· xnox opened on Aug 16, 2026

apko does not follow content-disposition headers when fetching key files

Status: Open.

#2252 In chainguard-dev/apko;

· fluix-dev opened on May 30, 2026

Package index fetches fail if APKINDEX.tar.gz doesn't support HEAD requests (e.g. Gitea/Forgejo package repositories)

Status: Open.

#2251 In chainguard-dev/apko;

· fluix-dev opened on May 30, 2026