When you deploy a container image to production, you might need an immutable container image. An immutable image is one that you can’t accidentally delete or overwrite.
Remediation
Use the az acr repository update command to set repository attributes so you can:
1. Lock an image version, or an entire repository2. Protect an image version or repository from deletion, but allow updates.3. Prevent read (pull) operations on an image version, or an entire repository.4. For More Information: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-image-lock