drop auto sha-commit prefix as label

Author: psantos-consensys

.github/workflows/build.yml

@@ -115,14 +115,12 @@ jobs:
           ECR_REGISTRY: ${{ inputs.ecr_registry }}
           ECR_REPOSITORY: ${{ inputs.ecr_repository }}
           IMAGE_TAGS: ${{ inputs.image_tags }}
-          COMMIT_SHA: ${{ github.sha }}
         run: |
           set -euo pipefail
           base="${ECR_REGISTRY}/${ECR_REPOSITORY}"
           IFS=',' read -ra tags <<<"$IMAGE_TAGS"
           {
             echo "tags<<EOF"
-            echo "${base}:sha-${COMMIT_SHA}"
             for tag in "${tags[@]}"; do
               echo "${base}:${tag}"
             done

.github/zizmor.yml

@@ -8,4 +8,4 @@ rules:
       # `job_workflow_ref` matches this file at a specific commit SHA,
       # so a tampered caller cannot reach ECR regardless of what these
       # path strings expand to.
-      - build.yml:151:24
+      - build.yml:149:24