Will It Vibe?Image reference has no tag
Part of Architecture & Best Practices, which counts for 15% of the overall score. When this check fires it deducts 4 points from that category, once per scan, no matter how many places it turns up.
What it detects
An image with no tag or digest resolves to :latest, so the running version is whatever the registry serves at pull time. This is a best-practice heuristic and can be intentional for local base images.
Why it matters
An image reference with no tag or digest defaults to :latest, so the running version depends on what the registry serves at pull time and can change between machines and deploys. This is the same reproducibility problem as an explicit :latest, just easier to miss. This check is a best-practice heuristic and can be intentional for a locally built base image.
How to fix it
Add an explicit version tag to each image (for example redis:7.2), or a digest for full immutability. If the image is built locally in the same file, either reference the build with a named image and tag or leave it and confirm the tag is applied at build time. Keep versions updated through reviewed changes.
The paid report includes a ready-to-paste prompt for your AI coding agent for every check it finds, pointed at the exact findings from your scan. See pricing
Does your repo trip this check?
Paste a GitHub URL or drop a project folder. Scans run in your browser and take seconds.
Scan your repo