repoDigest

The image sha256 digest in the form of repo[:tag]@sha256:<hash>. This may not be populated when building an image, because it is read from the local Docker client and so may be available only when the image was either pulled from the repo or pushed to the repo (perhaps using docker.RegistryImage) in a previous run.