Ensure Containers Jobs Use a Non-Latest Version Tag

Non-latest version tags are preferred because:

  • They ensure that the image is immutable and cannot be overwritten by another image with the same tag, which could lead to unexpected behavior or errors in the pipelines.
  • They provide a clear history of what image was used for a specific build or deployment, which enables easy rollback to a previous version if needed.
  • They support semantic versioning, which is a standard way of indicating the compatibility and stability of software releases.
    Therefore, this rule recommends using stable tags that correspond to major or minor versions of the image.