# docker pull Command Reference

> Reference for docker pull in CI: fetch an image or all tags from a registry, pin by digest, and pull for a specific platform in pipelines.

Source: https://latchkey.dev/learn/command-reference/docker-pull-command-reference  
Updated: 2026-06-26

Download an image from a registry.

docker pull fetches an image and its layers from a registry into the local store. Without an explicit tag it pulls :latest. For reproducible builds you can pull by digest (image@sha256:...) so the bytes never change.

## Common flags

- `-a, --all-tags` - download all tagged images in the repository
- `--platform` - pull for a specific platform, e.g. linux/arm64
- `-q, --quiet` - suppress verbose output
- `--disable-content-trust` - skip image signature verification (default true)

## Example

```shell
docker pull node:20-alpine
docker pull --platform linux/amd64 ghcr.io/myorg/base@sha256:${BASE_DIGEST}
```

## In CI

Pin base images by digest to make builds deterministic and immune to a moving tag. "toomanyrequests: You have reached your pull rate limit" on Docker Hub means anonymous rate limits were hit; authenticate with docker login or pull from a mirror.

## FAQ

### docker pull Command Reference?

docker pull fetches an image and its layers from a registry into the local store. Without an explicit tag it pulls :latest. For reproducible builds you can pull by digest (image@sha256:...) so the bytes never change.

### In CI?

Pin base images by digest to make builds deterministic and immune to a moving tag. "toomanyrequests: You have reached your pull rate limit" on Docker Hub means anonymous rate limits were hit; authenticate with docker login or pull from a mirror.

---

Latchkey runs CI/CD that repairs its own failures. Agent entry points: https://latchkey.dev/agent.txt, https://latchkey.dev/openapi.json, https://latchkey.dev/llms.txt