Closed slingamn closed 3 years ago
Slightly prefer the hash here because Dockerhub is untrusted third-party infrastructure (although I'm not sure if Kustomize validates the hash)?
We do indeed need the hash; newTag
would be in addition to the hash; and essentially serve as documentation.
Well, it's documented in the comment and the commit at this point, seems fine.
Slightly prefer the hash here because Dockerhub is untrusted third-party infrastructure (although I'm not sure if Kustomize validates the hash)?