コンテナイメージのtagをdigestに変更したい

input.yml

apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: demo
  name: demo
spec:
  replicas: 1
  selector:
    matchLabels:
      app: demo
  template:
    metadata:
      labels:
        app: demo
    spec:
      containers:
      - image: ghcr.io/making/hello-tanzu
        name: hello-tanzu

overlay.yml

#@ load("@ytt:overlay", "overlay")
#@ load("@ytt:data", "data")

#@ def replace_image(x):
#@   container = dict(**x)
#@   image = container["image"]
#@   rest = image.split(":")[0]
#@   container["image"] = rest + "@" + data.values.image.digest
#@   return container
#@ end

#@overlay/match by=overlay.subset({"kind":"Deployment","metadata":{"name":"demo"}})
---
spec:
 template:
   spec:
     containers:
     #@overlay/match by=overlay.index(0)
     - #@overlay/replace via=lambda a,b: replace_image(a)
       image:

values.yml

#@data/values
---
image:
  digest: sha256:360fee0f052e97f71a9c65e6bc8750a139575df8b90f0fb44a2d0fc4d7954748