A container platform runs a different application image under the same mutable tag in staging and production. How should release reproducibility be improved?

1. Disable image scanning to avoid noticing changes between environments.
2. Rebuild the image independently in production from floating dependencies.
3. Keep the mutable tag but add a release date to the deployment description.
4. Promote tested immutable image digests and apply tag immutability where appropriate.