# Why do i see the error \`Docker references with both a tag and digest are currently not supported\`?

**URL:** <https://community.replicated.com/t/why-do-i-see-the-error-docker-references-with-both-a-tag-and-digest-are-currently-not-supported/825>\
**Category:** Packaging an application\
**Created:** [June 24, 2022, 11:42pm UTC](https://community.replicated.com/t/why-do-i-see-the-error-docker-references-with-both-a-tag-and-digest-are-currently-not-supported/825 "2022-06-24T23:42:43Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dex](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.replicated.com/dex/32/26_2.png) [@dex](https://community.replicated.com/u/dex)\
**Post date:** [June 24, 2022, 11:42pm UTC](https://community.replicated.com/t/why-do-i-see-the-error-docker-references-with-both-a-tag-and-digest-are-currently-not-supported/825/1 "2022-06-24T23:42:43Z")

</div>

I’d like to use digests for security and repeatability of installations. However, when using SHAs in my kubernetes manifest `image` declarations, I get the following error:

```auto
Docker references with both a tag and digest are currently not supported

```

Why are digests not supported?

---

<div class="post-metadata">

**Author:** ![grant](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.replicated.com/grant/32/9_2.png) [@grant](https://community.replicated.com/u/grant)\
**Post date:** [June 25, 2022, 12:49pm UTC](https://community.replicated.com/t/why-do-i-see-the-error-docker-references-with-both-a-tag-and-digest-are-currently-not-supported/825/2 "2022-06-25T12:49:53Z")

</div>

Good question and this is something that is currently planned on our immediate roadmap ([Trello](https://trello.com/b/Q4rKFh3I/replicated-product-roadmap)) but as of today these are the reasons we don’t currently have support:

- The library we are currently using does not intend to fix this inability to use both tag & digest [Docker references with both a tag and digest are currently not supported · Issue #1407 · containers/buildah · GitHub](https://github.com/containers/buildah/issues/1407)
- The library we intend to switch over to soon, [GitHub - google/go-containerregistry: Go library and CLIs for working with container registries](http://github.com/google/go-containerregistry), handles tag, digest, and tag+digest formats, but with the last format it seems to discard the tag part and just behaves the same as the digest format
- This should be fixable post library change, but it may be limited on digest use to what we can support currently (fully online installs where all images can be pulled from the Replicated registry, a public repo, or proxied from a private repo via the Replicated registry)

---

<div class="post-metadata">

**Author:** ![craig](https://avatars.discourse-cdn.com/v4/letter/c/ed8c4c/32.png) [@craig](https://community.replicated.com/u/craig)\
**Post date:** [August 12, 2022, 8:54pm UTC](https://community.replicated.com/t/why-do-i-see-the-error-docker-references-with-both-a-tag-and-digest-are-currently-not-supported/825/3 "2022-08-12T20:54:23Z")

</div>

Good news! As of KOTS 1.81.0, image tags and digests can be used together wherever image digests are currently supported, which as @grant mentioned is in:

> fully online installs where all images can be pulled from the Replicated registry, a public repo, or proxied from a private repo via the Replicated registry

We are also still working towards image digest support for all use-cases.