Request image tags with pinned versions for stable production environments

[bnayah]

We have deployed ratify in all our environments; however, we are not thrilled that the notation plugin tag has only the latest available version and can change without our control.

Is there a secondary source of these plugins I can supply? Compile the plugin myself?

We need to reduce the version changes except under our specific control.

Thank you.