CV-B004: Image tag not pinned (mutable tag)
Warning Best Practice
Why This Matters
Mutable tags like latest, stable, edge, and nightly can point to different image versions over time. This means the same Compose file can produce different results on different machines or at different times, making deployments non-reproducible and difficult to debug.
How to Fix
Pin the image to a specific immutable version tag or SHA256 digest
Before (incorrect)
services:
web:
image: nginx:stableAfter (correct)
services:
web:
image: nginx:1.25.3-alpineRule Details
- Rule Code
- CV-B004
- Severity
- Warning
- Category
- Best Practice