advancedCI/CD with Docker: Jenkins, GitHub Actions & GitLab CI
Why is tagging images with 'latest' discouraged in CI/CD pipelines?
'latest' is a floating, mutable pointer — it doesn't tell you which specific commit or build produced the image currently running in any environment, making rollbacks, audits, and incident investigation far harder. Production pipelines should tag images by an immutable identifier like the git commit SHA or a monotonically increasing build number, so every deployed artifact traces back unambiguously to its source.
Ready to master this question?
Generate a complete walkthrough — background, the full answer in plain language, a working code example explained line by line, a real-world scenario, common mistakes, and how this same question gets asked in different ways.
Sign in to generate a response