# ghcr.io: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 2 judge labels across 1 category by 2 of 14 models. Page: https://www.gane.ai/index/it/vendors/ghcr-io

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Artifact and container registries](https://www.gane.ai/index/it/developer/artifact-and-container-registries/index.md) | 0% | 79 | 100% | 2 |

## And against it

- "Some of the registries mentioned include DockerHub, Quay.io, gcr.io, and ghcr.io. It is recommended to be cautious when using public registries" (Llama 4 Maverick, Artifact registries)
- "GitHub Packages/ghcr.io | Permission model confusion, preview features" (Kimi K2, Artifact registries)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 1 | 1 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 1 | 1 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named ghcr.io, from 5 of the 5 answers that named it (only the models that return a source list).

### Domains cited

- aquasec.com: 3
- github.com: 3
- paloaltonetworks.com: 3
- some-natalie.dev: 3
- blog.qualys.com: 2
- csoonline.com: 2
- docker.com: 2
- docs.github.com: 2
- guptadeepak.com: 2
- learn.microsoft.com: 2

### Pages cited

- https://aquasec.com/blog/250m-artifacts-exposed-via-misconfigured-registries: 3
- https://some-natalie.dev/blog/registry-risks: 3
- https://blog.qualys.com/product-tech/2026/01/22/public-container-registry-security-risks-malicious-images: 2
- https://csoonline.com/article/575157/thousands-of-misconfigured-container-and-artifact-registries-expose-sensitive-credentials.html: 2
- https://guptadeepak.com/tools/top-8-container-registries-2026: 2
- https://paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/ebooks/container-security-definitive-guide.pdf: 2
- https://paloaltonetworks.com/cyberpedia/container-registry-security: 2
- https://trendaisecurity.com/en-us/resources-insights/deep-research/exposed-container-registries-a-potential-vector-for-supply-chain-attacks: 2

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.