The ap_verify pipeline runs the code from a release container against a series of datasets specified in the etc/scipipe/ap_verify.yaml configuration file. That file specifies the git ref to be checked out for each dataset. For normal nightly builds and even weeklies, it is OK to test against the main branch. (Nightlies have no alternative, as there isn't a nightly git tag.) But when testing an official release container, the version of the dataset to be used may be quite a bit older than main.

We should add a DATASET_REF job parameter that can override ds.git_ref in the verifyDataset pipeline function in scipipe/ap_verify.groovy and make sure to set that to the gitTag when starting the ap_verify job in release/official_release.groovy.