Image tag types
| Tag | Example | Behavior |
|---|---|---|
latest | nginx-fips:latest | Always resolves to the most recently published image. Pulling this tag again in the future may give you a different image than today. |
| Stable line | nginx-fips:stable | Tracks the current stable release line. Updates automatically to the newest stable patch but never jumps to a new major or minor version without your input. |
| Image line | nginx-fips:1.26 | Pins to a specific minor version. You will receive patch updates automatically, but your image will not advance to 1.27. |
| Version | nginx-fips:1.26.3 | Pins to an exact version. You can receive vulnerability patches and stay protected by making sure to pull fresh images |
| Timestamp | nginx-fips:1.26.3-202504300027 | Pins to a specific build of a specific version. The timestamp tag is equivalent to the image digest. It is useful for full reproducibility in air-gapped or compliance-sensitive environments. |