ci: restrict CI trigger to semantic version tags

- remove non-semantic version tag pattern from GitHub Actions workflow
- ensure builds only trigger on valid semantic versioning tags like v1.2.3

Signed-off-by: mingcheng <[email protected]>

Author: mingcheng

.github/workflows/ghcr.yml

@@ -4,9 +4,8 @@ on:
   push:
     branches:
       - main
-      - develop
     tags:
-      - "v*.*.*"  # Semantic versioning tags (v1.0.0, v1.2.3, etc.)
+      - "v*.*.*" # Match version tags like v1.2.3
   pull_request:
     branches:
       - main
@@ -46,6 +45,11 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - uses: benjlevesque/[email protected]
+        id: short-sha
+        with:
+          length: 7
+
       - name: Extract metadata (tags, labels) for Docker
         id: meta
         uses: docker/metadata-action@v5
@@ -64,6 +68,7 @@ jobs:
             type=sha,format=short
             # Tag latest only on main branch
             type=raw,value=latest,enable={{is_default_branch}}
+            type=raw,value={{steps.short-sha.outputs.sha}},enable={{is_default_branch}}
           labels: |
             org.opencontainers.image.title=aigitcommit
             org.opencontainers.image.description=AI-powered Git commit message generator
@@ -76,7 +81,9 @@ jobs:
           context: .
           platforms: linux/amd64,linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
+          tags: |
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.short-sha.outputs.sha }}
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=gha
           cache-to: type=gha,mode=max