CI: directly push, then immediately record image digest
CI: directly push, then immediately record image digest
Push directly on build, then pull the digest from the registry as the next step.
This is to verify that any image pushed with release
is the one from the pipeline
which originated the job.
Edited by Jason Plum