Fail the job if docker tag matches MAJOR.MINOR.PATCH naming

Author: andreiborza

.github/workflows/build.yml

@@ -1,21 +1,15 @@
 name: Build and Test
 
 on:
+  push:
+    branches:
+      - release/**
   pull_request:
     types:
       - opened
       - synchronize
       - reopened
 
-env:
-  # Variables defined in the repository
-  SENTRY_ORG: ${{ vars.SENTRY_ORG }}
-  # For master, we have an environment variable that selects the action-release project
-  # instead of action-release-prs
-  # For other branches: https://sentry-ecosystem.sentry.io/releases/?project=4505075304693760
-  # For master branch: https://sentry-ecosystem.sentry.io/releases/?project=6576594
-  SENTRY_PROJECT: ${{ vars.SENTRY_PROJECT }}
-
 jobs:
   docker-build:
     name: Build & publish Docker images
@@ -39,6 +33,14 @@ jobs:
         run: |
           TAG=$(yq '... | select(has("uses") and .uses | test("docker://ghcr.io/getsentry/action-release-image:.*")) | .uses' action.yml | awk -F':' '{print $3}')
           echo "DOCKER_TAG=$TAG" >> $GITHUB_ENV
+          
+          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
+            if [[ "$TAG" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+              echo "Error: DOCKER_TAG ($TAG) is not allowed to match  `MAJOR.MINOR.PATCH` inside a pull request."
+              echo "Please rename the docker tag in `action.yml` and try again."
+              exit 1
+            fi
+          fi
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3