Request image tags with pinned versions for stable production environments

We have deployed ratify in all our environments; however, we are not thrilled that the notation plugin tag has only the latest available version and can change without our control.

[](https://gallery.ecr.aws/aws-signer/notation-plugin)

Is there a secondary source of these plugins I can supply? Compile the plugin myself?

We need to reduce the version changes except under our specific control.

Thank you.

The issue names no files, tests, or entry points. Start by tracing how the Notation plugin image is published and how its current latest tag is produced; then determine whether immutable versioned tags or a buildable source path are supported. Done means a documented, controllable way to select a fixed plugin version.

Written by the indexing model from the issue text.