How to learn which Zammad commit a Docker image was built from?

There might be better ways, but you can go to https://github.com/zammad/zammad/pkgs/container/zammad, find the tag there, and then look for “other tags on this image”. There should be an sha-... tag which references the git commit sha that the image was built from.