Platform & DevOps·Packaging: containers and images
the deployment names a sha256 hash instead of a version, and there is exactly one set of bytes that could ever satisfy it.
Image digest
Also calledcontent digest, sha256 digest, immutable reference
The content hash of an image manifest, and therefore an immutable identifier for exactly those bytes. It is what makes a rollout reproducible and what signing and admission policies actually attach to, since a signature over a mutable tag would prove nothing. The cost is legibility — nobody can read a rollout history of hashes — which is why pipelines usually keep the tag for people and the digest for machines.