On reproducible Docker images
multi-arch Docker images without immutable tags
Most of the base images in the Docker registry do not offer immutable tags. This means that if you’re building your Docker image based on, for example, an official Ruby image
ruby:3.3.0-slim, it might change overnight, and the machines that have already downloaded this tag will never receive an updated image.