Ensure the identical Docker image is deployed to Development, Test, and Production. How should the build identify the image?

Using the digest of the Docker image guarantees that the exact same image bits are deployed across all environments (Development, Test, Production). A digest (e.g., sha256:abcdef...) is a content-addressable hash, meaning any change to the image content will result in a different digest. Using the latest tag is problematic because the image it points to can change at any time, leading to different images in different environments. A unique Docker image name doesn't ensure content immutability; the image behind that name can still be updated. Semantic version tags (e.g., v1.0.0) are better than latest but can still be overwritten or point to different builds if not managed strictly, potentially leading to discrepancies. The digest provides the strongest guarantee of immutability.