Never Use Docker Latest Tag in a Deployment

Never use the latest tag in a deployment. It is a bad idea. The real problem is which version is actually running in production? If all you do is tag latest and deploy that, you don’t actually know which git version is running there. Instead, create latest when you merge code into main / master branch, but always use either a git SHA or semver release version.