As of PR #1658, image build steps based on an imported image (directory or tarball) will always hit, regardless of whether a new version of the image is imported. This issue is to do something smarter. Options include: 1. invalidate all descendant cache entries 2. use file metadata somehow 3. implement import as a special case of `COPY`