advancedDocker Registry & Image Distribution: Tagging, Versioning, Push & Pull

Why is tagging an image :latest a real risk for anything deployed to production?

`:latest` is just a mutable pointer to whatever manifest was last pushed to that tag — it provides no way to know what code it actually contains, and repointing it while something is already running gives no reliable way to reproduce or roll back to what was actually deployed at a given time.

Ready to master this question?

Generate a complete walkthrough — background, the full answer in plain language, a working code example explained line by line, a real-world scenario, common mistakes, and how this same question gets asked in different ways.

Sign in to generate a response

Next Step

Continue to What's the difference between pulling an image by tag versus by digest?← Back to all Docker questions