Docker image hash-tags

Pin Docker images with a hashsum as tag

Today I learned:

Docker images can be referenced using the content-digest hash in place of a tag.

$ docker inspect alpine:latest | jq .[0].RepoDigests
[
  "alpine@sha256:69665d02cb32192e52e07644d76bc6f25abeb5410edc1c7a81a10ba3f0efb90a"
]

$ docker run -it alpine@sha256:69665d02cb32192e52e07644d76bc6f25abeb5410edc1c7a81a10ba3f0efb90a
/ # exit