Compose image not pinned (ARCH10015)

Key config.compose.unpinned-image · Severity warning · Category quality

Without a version the next docker compose pull may run something else than the one before it, on one machine and not on another.

Incorrect

services:
  cache:
    image: redis:latest

Correct

services:
  cache:
    image: redis:7.4.1

Fix

Pin a version tag or a digest.

Not flagged

• A service that also has build:: its image: names what the build produces, not what is pulled.
• A digest and an image given by a variable (${APP_IMAGE}).