Artifacts

Why build the artifact once and promote it, rather than building per environment?

Whether the candidate connects artifact identity to the ability to reason about what is running and what was tested.

The situation behind the question

The deploy pipeline checks out the release branch and runs docker build separately in each environment stage. A production deploy last week pulled a base image that had been updated that morning, and production ran a different OpenSSL version than the one that passed staging.