Allow to specify the SHA with the tag

[quentinus95]

What would you like?

Hello, for enhanced security would it be possible to update the chart, so it is possible to pass the SHA along with the tag?

Example of currently unsupported values:

image:
  repository: ghcr.io/aureq/cert-manager-webhook-ovh
  tag: 0.6.0@sha256:6e38b4420232ec6ab6ed2e75d15b7b5b60088a886ac28ef30cc4327fd3ad1c9c

Leads to the error:

metadata.labels: Invalid value: "0.6.0@sha256:6e38b4420232ec6ab6ed2e75d15b7b5b60088a886ac28ef30cc4327fd3ad1c9c": must be no more than 63 characters, metadata.labels: Invalid value: "0.6.0@sha256:6e38b4420232ec6ab6ed2e75d15b7b5b60088a886ac28ef30cc4327fd3ad1c9c": a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyValue',  or 'my_value',  or '12345', regex used for validation is '(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?')

Such syntax is pretty standard and is used, for instance, by Renovate to pin dependencies.