I don't quite get the need to perfectly reproducible builds. At least in my org, that ends up being more of a detriment than a boon. The problem? Devs hate up

I don't quite get the need to perfectly reproducible builds. At least in my org, that ends up being more of a detriment than a boon. The problem? Devs hate updating libraries, which is a crucial part of security with docker. Call me crazy, but I prefer the fact that `apt install foo` gets the latest foo and not what was pinned. We test our images before sending them to prod so if something breaks it's pretty easy to catch it.