From 00a375a8d56aed426cdc614470aad60b5fedccf8 Mon Sep 17 00:00:00 2001
From: Moritz Lang <16192401+slashmo@users.noreply.github.com>
Date: Sat, 6 Jun 2026 21:32:02 +0200
Subject: [PATCH] [CI] Use 7-char short sha in --version to match Docker tag

---
 .github/workflows/main.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index e58ae24..1722373 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -49,6 +49,12 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
 
+      # Match docker/metadata-action's default `type=sha` format (7-char short sha) so the
+      # baked-in version aligns with the public-facing per-commit image tag.
+      - name: Compute version
+        id: version
+        run: echo "value=sha-${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
+
       - name: Build and push
         uses: docker/build-push-action@v7
         with:
@@ -57,7 +63,7 @@ jobs:
           push: true
           tags: ghcr.io/${{ github.repository }}:sha-${{ github.sha }}${{ matrix.variant.tag_suffix }}-${{ matrix.arch.name }}
           build-args: |
-            CRANECTL_VERSION=sha-${{ github.sha }}
+            CRANECTL_VERSION=${{ steps.version.outputs.value }}
           cache-from: type=gha,scope=${{ matrix.variant.name }}-${{ matrix.arch.name }}
           cache-to: type=gha,mode=max,scope=${{ matrix.variant.name }}-${{ matrix.arch.name }}