Status: Accepted
Date: 2026-01-25
How to reference container images in manifests.
Use digest as primary reference; tag only for readability.
- Digest is immutable (reproducibility guarantee)
- Tags can be overwritten (drift risk)
- GitOps requires determinism
- Pipeline must extract and persist digest
- Rollback is always to a specific digest