> ## Content Index
> Fetch the complete content index at: https://news1.aap.quest/llms.txt
> Use this file to discover other available public pages before exploring further.

# Pin by digest, not by tag
- URL: https://news1.aap.quest/pin-by-digest-not-by-tag/
- Published: 2026-10-30T07:05:00.000Z
- Updated: 2026-11-02T23:37:02.000Z
- Description: Tags move. Digests don't.
- Author: navid
- Tags: Issue 4, #fake-sample

A tag like 2.16 can point at a different image tomorrow. A sha256 digest can't.

Pin the base image by digest and every collection by exact version in requirements.yml.

Upgrades become a deliberate change you can review and roll back.