If I interpret this correctly, it's attempting to pull the docker image that it's just about to create, so it will probably not ever succeed(?). Should it instead try to pull the most recent build/version, so that it can benefit from the cached layers?
https://github.com/2DegreesInvesting/PACTA_analysis/blob/3f7bf7b7bf91d477d5a0d723af798825a9290e93/azure-pipelines.yml#L95