Exactly this. Short hash to identify builds, generally, seems to a pattern (and one that usually works fine in practice). It gets a bit dicy once you setup CI

Exactly this. Short hash to identify builds, generally, seems to a pattern (and one that usually works fine in practice). It gets a bit dicy once you setup CI to start generating builds/images off every commit to master, and then off every push to every branch. In practice, though, I haven't seen it bite of the projects I've been on. Usually something will break and then you just update the scripts to use N+1 characters. In theory, a short-sighted script without safeties could do something wacky like deploy an image that's several months/years old. Running the numbers suggests something so catastrophic is quite unlikely.