diff --git a/bitnami/airflow/CHANGELOG.md b/bitnami/airflow/CHANGELOG.md
index 1ed31776b7..c3e89f2f1e 100644
--- a/bitnami/airflow/CHANGELOG.md
+++ b/bitnami/airflow/CHANGELOG.md
@@ -1,8 +1,13 @@
# Changelog
-## 22.3.3 (2024-12-10)
+## 22.4.0 (2024-12-10)
-* [bitnami/airflow] Release 22.3.3 ([#30856](https://github.com/bitnami/charts/pull/30856))
+* [bitnami/airflow] Detect non-standard images ([#30860](https://github.com/bitnami/charts/pull/30860))
+
+## 22.3.3 (2024-12-10)
+
+* [bitnami/*] Add Bitnami Premium to NOTES.txt (#30854) ([3dfc003](https://github.com/bitnami/charts/commit/3dfc00376df6631f0ce54b8d440d477f6caa6186)), closes [#30854](https://github.com/bitnami/charts/issues/30854)
+* [bitnami/airflow] Release 22.3.3 (#30856) ([651f475](https://github.com/bitnami/charts/commit/651f4751d1ac434c11b6706c894fa4cb535b8bbd)), closes [#30856](https://github.com/bitnami/charts/issues/30856)
## 22.3.2 (2024-12-10)
diff --git a/bitnami/airflow/Chart.yaml b/bitnami/airflow/Chart.yaml
index 8bb3cfad5e..69f910868a 100644
--- a/bitnami/airflow/Chart.yaml
+++ b/bitnami/airflow/Chart.yaml
@@ -39,4 +39,4 @@ maintainers:
name: airflow
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/airflow
-version: 22.3.3
+version: 22.4.0
diff --git a/bitnami/airflow/README.md b/bitnami/airflow/README.md
index f15179e486..6497180fae 100644
--- a/bitnami/airflow/README.md
+++ b/bitnami/airflow/README.md
@@ -374,6 +374,7 @@ The Bitnami Airflow chart relies on the PostgreSQL chart persistence. This means
| `global.imageRegistry` | Global Docker image registry | `""` |
| `global.imagePullSecrets` | Global Docker registry secret names as an array | `[]` |
| `global.defaultStorageClass` | Global default StorageClass for Persistent Volume(s) | `""` |
+| `global.security.allowInsecureImages` | Allows skipping image verification | `false` |
| `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
| `global.compatibility.omitEmptySeLinuxOptions` | If set to true, removes the seLinuxOptions from the securityContexts when it is set to an empty object | `false` |
@@ -1283,6 +1284,10 @@ Find more information about how to deal with common errors related to Bitnami's
## Upgrading
+### To 22.4.0
+
+This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850).
+
### To 22.2.0
This minor version no longer expects custom Airflow configuration (set via the `configuration` parameter) to be provided as a string. Instead, it expects a dictionary with the configuration sections/keys/values. Find more info in the [section](#airflow-configuration-file) above.
diff --git a/bitnami/airflow/templates/NOTES.txt b/bitnami/airflow/templates/NOTES.txt
index c3975513c1..7c41b02969 100644
--- a/bitnami/airflow/templates/NOTES.txt
+++ b/bitnami/airflow/templates/NOTES.txt
@@ -129,3 +129,4 @@ To connect to Airflow from outside the cluster, perform the following steps:
{{- include "common.warnings.rollingTag" .Values.metrics.image }}
{{- include "common.warnings.resources" (dict "sections" (list "scheduler" "web" "worker" "defaultSidecars.syncDAGsPlugins" "defaultInitContainers.loadDAGsPlugins" "metrics") "context" $) }}
{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.metrics.image) "context" $) }}
+{{- include "common.errors.insecureImages" (dict "images" (list .Values.image .Values.metrics.image) "context" $) }}
diff --git a/bitnami/airflow/values.yaml b/bitnami/airflow/values.yaml
index 77f39ffad9..67f00f3338 100644
--- a/bitnami/airflow/values.yaml
+++ b/bitnami/airflow/values.yaml
@@ -18,6 +18,11 @@ global:
##
imagePullSecrets: []
defaultStorageClass: ""
+ ## Security parameters
+ ##
+ security:
+ ## @param global.security.allowInsecureImages Allows skipping image verification
+ allowInsecureImages: false
## Compatibility adaptations for Kubernetes platforms
##
compatibility: