Slot: Container Image Digest (container_image_digest)

SHA256 of the container image actually used (not just the tag). Reproducibility-critical.

Tier: recommended

Why this slot matters

Image tags are mutable, so "same tag" does not mean same code; only the digest pins the exact bytes that ran. It is the strongest reproducibility anchor available for a containerised run.

In plain terms

A digest is an exact serial number for the software bundle actually used — stronger than a version label, which can be reused for different contents. If the bundle changes at all, the serial number changes.

URI: envar:slot/container_image_digest

Applicable Classes

Name	Description	Modifies Slot
ToolRun	A single tool invocation that produced an output from one or more inputs: too...	no

Properties

Type and Range

Property	Value
Range	String
Domain Of	ToolRun

Cardinality and Requirements

Property	Value

Examples

Value
sha256:a8b3c2d1e0f9...

Identifier and Mapping Information

Annotations

property	value
tier	recommended
justification	Image tags are mutable, so "same tag" does not mean same code; only the digest pins the exact bytes that ran. It is the strongest reproducibility anchor available for a containerised run.
explanation	A digest is an exact serial number for the software bundle actually used — stronger than a version label, which can be reused for different contents. If the bundle changes at all, the serial number changes.
covered_by	None

Schema Source

from schema: https://w3id.org/linkml/microschemas/envar

Mappings

Mapping Type	Mapped Value
self	envar:container_image_digest
native	envar:container_image_digest

LinkML Source

name: container_image_digest
annotations:
  tier:
    tag: tier
    value: recommended
  justification:
    tag: justification
    value: Image tags are mutable, so "same tag" does not mean same code; only the
      digest pins the exact bytes that ran. It is the strongest reproducibility anchor
      available for a containerised run.
  explanation:
    tag: explanation
    value: A digest is an exact serial number for the software bundle actually used
      — stronger than a version label, which can be reused for different contents.
      If the bundle changes at all, the serial number changes.
  covered_by:
    tag: covered_by
    annotations:
      omop_gaia:
        tag: omop_gaia
        annotations:
          extent:
            tag: extent
            value: absent
          status:
            tag: status
            value: asserted
          where:
            tag: where
            value: no column
          note:
            tag: note
            value: Container image digest is not carried by any native gaia output.
      degauss:
        tag: degauss
        annotations:
          extent:
            tag: extent
            value: absent
          status:
            tag: status
            value: asserted
          where:
            tag: where
            value: no column
          note:
            tag: note
            value: Only the mutable image tag is in the filename; no SHA256 digest
              is emitted.
      amadeus:
        tag: amadeus
        annotations:
          extent:
            tag: extent
            value: absent
          status:
            tag: status
            value: asserted
          where:
            tag: where
            value: no column
          note:
            tag: note
            value: No container image digest is emitted.
      cher:
        tag: cher
        annotations:
          extent:
            tag: extent
            value: absent
          status:
            tag: status
            value: asserted
          where:
            tag: where
            value: no column
          note:
            tag: note
            value: C-HER records no producing-tool container image digest.
      codata:
        tag: codata
        annotations:
          extent:
            tag: extent
            value: out_of_layer
          status:
            tag: status
            value: asserted
          where:
            tag: where
            value: no column
          note:
            tag: note
            value: Container digest is instance-layer; out of scope for CODATA.
description: SHA256 of the container image actually used (not just the tag). Reproducibility-critical.
title: Container Image Digest
examples:
- value: sha256:a8b3c2d1e0f9...
from_schema: https://w3id.org/linkml/microschemas/envar
see_also:
- https://github.com/opencontainers/image-spec
rank: 1000
domain_of:
- ToolRun
range: string