Glossary / Docker

Tag

A tag (`:1.4.2`, `:latest`) is a mutable label pointing at an image digest. Tags are convenient but not immutable — `latest` can point to a different image tomorrow — so production deployments should pin to a digest (`@sha256:...`) when reproducibility matters.