Create a new tag called stable that points to the previously working container, and change the deployment to point to the new tag.

Alter the deployment to point to the sha256 digest of the previously working container.

Build a new container from a previous Git tag, and do a rolling update on the deployment to the new container.

Apply the latest tag to the previous container image, and do a rolling update on the deployment.