My guess is that something is doing some kind of caching. That’s not much help, but that’s what I’d try to look for.
Unless they just hate Docker, they can build their own images with discourse_docker. Then they can see exactly what is happening and not have to trust anyone else’s images.