Always resolves to the most recently published image. Pulling this tag again in the future may give you a different image than today.
Stable line
nginx-fips:stable
Tracks the current stable release line. Updates automatically to the newest stable patch but never jumps to a new major or minor version without your input.
Image line
nginx-fips:1.26
Pins to a specific minor version. You will receive patch updates automatically, but your image will not advance to 1.27.
Version
nginx-fips:1.26.3
Pins to an exact version. You can receive vulnerability patches and stay protected by making sure to pull fresh images
Timestamp
nginx-fips:1.26.3-202504300027
Pins to a specific build of a specific version. The timestamp tag is equivalent to the image digest. It is useful for full reproducibility in air-gapped or compliance-sensitive environments.
For example, if you want to pull to the NGINX-FIPS image, you can pull by any of the image tags: