Currently it appears that icr.io/ns1pub/cert-manager-webhook-ns1 only publishes a latest tag. This makes it more difficult to use in environments that require running a pinned version instead of just consuming the latest available release which may introduce unexpected changes that could adversely impact environments.