Public search query: agent's patch-verification run re-scanned the wrong container tag: how to pin