Browse Teach Curate

Pinning an Image by Content Digest Instead of a Mutable Tag

This is the single most common way a supposedly pinned scientific result quietly stops reproducing: a rerun against a moved tag produces different numbers with no error, no warning and no diff. It is distinct from packaging an image at all, and distinct from lock files, which pin what goes inside the image. Without it the environment record is a name rather than a fact, and the outcome's reproducibility clause fails silently.

jeremy Video

Pinning a Docker Image by Its sha256 Digest Instead of a Mutable Tag

Container image references come in two kinds with different guarantees: a tag is a mutable, human-assigned pointer that an upstream registry may repoint at any time, whereas a digest is a cryptograph…