Iron Bank UI should include image digest in all image references
Docker tags are mutable, which can lead to real security problems.
Currently, Iron Bank's web interface only references images by tags. For example, from https://ironbank.dso.mil/repomap/details;registry1Path=hashicorp%252Fvault
docker pull registry1.dso.mil/ironbank/hashicorp/vault:1.11.7
I know that Iron Bank doesn't allow tags to be updated, but defense in depth best practices encourage consideration of scenarios where the tag was updated (even though that's not supposed to happen). Therefore, I think the Iron Bank UI should provide digest information and encourage the use of digests by including digests in image references.
The web site actually says:
docker pull registry1.dso.mil/ironbank/hashicorp/vault:1.11.7
The desired text is:
docker pull registry1.dso.mil/ironbank/hashicorp/vault:1.11.7@sha256:7816075ab623a47f0611b7fe7a5608e7e423ba7acb9afe53459c825f39d3bf24