If you’re using tags to specify the version of your base image, you might not get the same image every time. Tags are mutable, meaning they can be
updated to point to a different image. This can lead to inconsistencies between builds, making it difficult to reproduce bugs or replicate your
environment. Moreover, if an attacker gains control of the repository, they could replace the image with a compromised one. Using a digest to pin the
version of your base image can mitigate this risk.
