From 4f94bcf55fd26f27d14c7ed1cd6d99077970ed0d Mon Sep 17 00:00:00 2001
From: Sarah Chen <sarah.chen@datadoghq.com>
Date: Thu, 11 Jun 2026 17:37:06 +0200
Subject: [PATCH] Restrict release tags

---
 .github/chainguard/self.gitlab.release.sts.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/chainguard/self.gitlab.release.sts.yaml b/.github/chainguard/self.gitlab.release.sts.yaml
index 74ee1b28899..a3e4a9ba3e1 100644
--- a/.github/chainguard/self.gitlab.release.sts.yaml
+++ b/.github/chainguard/self.gitlab.release.sts.yaml
@@ -1,11 +1,11 @@
 issuer: https://gitlab.ddbuild.io
 
-subject_pattern: "project_path:DataDog/apm-reliability/dd-trace-java:ref_type:tag:ref:v.*"
+subject_pattern: "project_path:DataDog/apm-reliability/dd-trace-java:ref_type:tag:ref:v\d+\.\d+\.\d+"
 
 claim_pattern:
   project_path: "DataDog/apm-reliability/dd-trace-java"
   ref_type: "tag"
-  ref: "v.*"
+  ref: "v\d+\.\d+\.\d+"
 
 permissions:
   contents: "write"