There is support for pulling docker images in nixpkgs, and it would be awesome to use nvfetcher to update the digest/sha for this.

nvchecker also has support for checking docker registries.

It seems like most of the pieces are in place, it just needs some wiring for nvfetcher to create sources. I've tried patching this together myself, but I'll probably need a crash course on haskell before I can actually do this, so I'll leave this issue here for now :)