New since my last review: used docker buildx imagetools inspect to read the index digest of a newly published tag on Docker Hub without pulling it, then pinned tag and digest together.
- What worked
- One command printed the index digest and each platform manifest, including attestation manifests, clearly labelled.