save checkpoint. addition features and their state. check some ofthem

devops/release/docker/Dockerfile.dotnet-service

@@ -11,10 +11,12 @@ ARG GIT_SHA=0000000
 ARG SOURCE_DATE_EPOCH=0
 
 FROM ${SDK_IMAGE} AS build
+ARG SDK_IMAGE
 ARG PROJECT
 ARG GIT_SHA
 ARG SOURCE_DATE_EPOCH
 WORKDIR /src
+RUN case "${SDK_IMAGE}" in *@sha256:*) ;; *) echo "SDK_IMAGE must be digest-pinned (@sha256:...)"; exit 86;; esac
 ENV DOTNET_CLI_TELEMETRY_OPTOUT=1 \
     DOTNET_SKIP_FIRST_TIME_EXPERIENCE=1 \
     NUGET_XMLDOC_MODE=skip \
@@ -33,11 +35,13 @@ RUN --mount=type=cache,target=/root/.nuget/packages \
       /p:TreatWarningsAsErrors=true
 
 FROM ${RUNTIME_IMAGE} AS runtime
+ARG RUNTIME_IMAGE
 WORKDIR /app
 ARG ENTRYPOINT_DLL
 ARG VERSION
 ARG CHANNEL
 ARG GIT_SHA
+RUN case "${RUNTIME_IMAGE}" in *@sha256:*) ;; *) echo "RUNTIME_IMAGE must be digest-pinned (@sha256:...)"; exit 87;; esac
 ENV DOTNET_EnableDiagnostics=0 \
     ASPNETCORE_URLS=http://0.0.0.0:8080
 COPY --from=build /app/publish/ ./