Pull image by tag?

[carl-unique]

Isn't it possible to pull the image by tag? like
docker pull docker pull ghcr.io/pycqa/bandit/bandit:1.9.4 ?

i digged through the build logs and it seems its always build as latest, but the tag is never applied.

so to reference a specific version i can search through the build logs and use image digest of tagged build like:

docker pull ghcr.io/pycqa/bandit/bandit@sha256:10882bee791d92957935ccfdc324623903c535dca1fa84ac17f2ec3825047a9c but it would be convenient, when releasing a tag, to have this sha better visible on the release page maybe?

Or i just do not see howto get the tagged version pulled.

Thanks for your help!