Skip to main content
Using latest is prone to errors if the image will ever update. Pin the version explicitly to a release tag.
PropertyValue
SeverityWarning
CategoryBest Practice
DefaultEnabled

Description

You can never rely that the latest tag is a specific version. Pin the version explicitly to a release tag to ensure reproducible builds.

Examples

Problematic code

FROM debian:latest

Correct code

FROM debian:jessie

Reference