Greg writes...

Chris and the Badger!  Love your show.  It inspired me to learn docker this  past April and then convert all of my self-hosted services to docker. 
I built one big docker-compose that provide mariadb for various components, plus swag (and SSL!) for my external services.  And I've moved to airsonic-advanced and added booksonic and ghost as well.  Al tips from you two. 

Here's my question.
How to managed updates of the various service images? Most of the compose entries are built with ":latest".  Should I move to specific version definitions and rebuild on a regular basis?  And for in-container security updates - how often should I repull the images to keep them up-to-date. Perhaps there is a guide or whitepaper on different approaches.
Thanks!