Why do i see the error `Docker references with both a tag and digest are currently not supported`?

[dex]

I’d like to use digests for security and repeatability of installations. However, when using SHAs in my kubernetes manifest image declarations, I get the following error:

Docker references with both a tag and digest are currently not supported

Why are digests not supported?

[grant]

Good question and this is something that is currently planned on our immediate roadmap (Trello) but as of today these are the reasons we don’t currently have support:

• The library we are currently using does not intend to fix this inability to use both tag & digest Docker references with both a tag and digest are currently not supported · Issue #1407 · containers/buildah · GitHub
• The library we intend to switch over to soon, GitHub - google/go-containerregistry: Go library and CLIs for working with container registries, handles tag, digest, and tag+digest formats, but with the last format it seems to discard the tag part and just behaves the same as the digest format
• This should be fixable post library change, but it may be limited on digest use to what we can support currently (fully online installs where all images can be pulled from the Replicated registry, a public repo, or proxied from a private repo via the Replicated registry)

[craig]

Good news! As of KOTS 1.81.0, image tags and digests can be used together wherever image digests are currently supported, which as @grant mentioned is in:

fully online installs where all images can be pulled from the Replicated registry, a public repo, or proxied from a private repo via the Replicated registry

We are also still working towards image digest support for all use-cases.