Pinned Image Digests Turn a Container Tag into a Reproducible Dependency
A mutable tag tells you what to ask for; a digest tells you what bytes you actually accepted.
OCI
Mutable Tags Make Rollback Ambiguous
You cannot reliably roll back to yesterday's image if the tag you used yesterday points somewhere else today.