A bit late to the party but you could pull the image based on the SHA256 digest instead of the Image tag, since the digest changes if any of the layers change, while the tag is whatever tag its pushed with.