Digest Pinning - CI/CD用語集の定義
digest pinningとは、containerイメージをtagではなくコンテンツアドレス指定のsha256: digestで参照することで、毎回まったく同じバイトがpullされ、tagが動いてもbuildが変わらないようにすることです。
関連ガイド
OCI Image - CI/CD Glossary DefinitionAn OCI image is a container image following the Open Container Initiative spec, so it runs across Docker, con…
Immutable Tag - CI/CD Glossary DefinitionAn immutable tag is a registry image tag that cannot be overwritten once pushed, so a given tag always maps t…
Provenance Attestation - CI/CD Glossary DefinitionA provenance attestation is a signed record of how an artifact was built - source, builder, inputs - that con…