diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 4a88c4c9..1e22daba 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -31,6 +31,7 @@ jobs:
       - name: Build frontend
         run: |
           docker build -t ${{ env.REGISTRY }}/${{ env.PROJECT }}/frontend:${{ env.SHORT_SHA }} \
+            --build-arg GIT_SHA=${{ env.SHORT_SHA }} \
             -f docker/deploy/frontend.Dockerfile \
             frontend/
 
@@ -81,6 +82,12 @@ jobs:
           echo "============================================"
           kubectl get pods -n invyone -o wide || true
 
+          echo
+          echo "============================================"
+          echo "=== Deployment images (현재 어떤 tag 가 떠있는지) ==="
+          echo "============================================"
+          kubectl get deploy -n invyone -o jsonpath='{range .items[*]}{.metadata.name}{": "}{.spec.template.spec.containers[*].image}{"\n"}{end}' || true
+
           echo
           echo "============================================"
           echo "=== backend-spring describe ==="
diff --git a/docker/deploy/frontend.Dockerfile b/docker/deploy/frontend.Dockerfile
index 63e16f2b..46490573 100644
--- a/docker/deploy/frontend.Dockerfile
+++ b/docker/deploy/frontend.Dockerfile
@@ -25,6 +25,13 @@ ARG SERVER_API_URL=http://backend-spring.invyone.svc.cluster.local:8081
 ENV NEXT_PUBLIC_API_URL=$NEXT_PUBLIC_API_URL
 ENV SERVER_API_URL=$SERVER_API_URL
 
+# Cache bust — GIT_SHA 가 매 commit 마다 다르므로 이 라인부터 아래 layer 가
+# 항상 invalidate 되어 npm run build 가 새 source 로 다시 실행됨.
+# (npm install layer 는 위쪽이라 영향 없음 — 빌드 시간 손해 없음.)
+ARG GIT_SHA=unknown
+ENV GIT_SHA=$GIT_SHA
+RUN echo "Build SHA: $GIT_SHA"
+
 # Build the application
 ENV DISABLE_ESLINT_PLUGIN=true
 RUN npm run build