Because if that’s the case, it still needs to build it and compare final hashes in order to decide if something needs to be pushed or not. But the build aspect needs to happen - which makes it less idempotent, if something is changed upstream, maybe some dependency or whatever - obviously a dockerfile should be as idempotent as possible, but still room for errors, I am just figuring out how it works so I can make a better decision.