Skip to main content

KA-R009: Image uses latest or no tag

Warning Reliability

Why This Matters

The container image uses the "latest" tag or has no tag specified (which defaults to "latest"). This makes deployments non-reproducible because the actual image version can change between pulls. It also prevents reliable rollbacks since there is no specific version to roll back to.

How to Fix

Pin the image to a specific version tag or digest

Before (incorrect)

containers:
  - name: app
    image: myapp:latest

After (correct)

containers:
  - name: app
    image: myapp:1.2.3

Rule Details

Rule Code
KA-R009
Severity
Warning
Category
Reliability

Related Rules

KA-R011 Error

Selector/template label mismatch
KA-R001 Warning

Missing liveness probe
KA-R002 Warning

Missing readiness probe
KA-R003 Warning

Identical liveness and readiness probes
KA-R004 Warning

Single replica Deployment