diff --git a/.github/workflows/daily-scan.yaml b/.github/workflows/daily-scan.yaml
index 6ea2082..6a350bd 100644
--- a/.github/workflows/daily-scan.yaml
+++ b/.github/workflows/daily-scan.yaml
@@ -37,7 +37,7 @@ jobs:
         with:
           context: deploy
           image-name: replicated/replicated-sdk:${{ github.sha }}
-          git-tag: ${{ github.sha }}
+          git-tag: "1.0.0" # can't use ${{ github.sha }} because melange config requires strict format.
           
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 533e986..bdc8b79 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -45,7 +45,7 @@ jobs:
         with:
           context: deploy
           image-name: ttl.sh/automated-${{ github.run_id }}/replicated/replicated-sdk:24h
-          git-tag: ${{ github.sha }}
+          git-tag: "1.0.0" # can't use ${{ github.sha }} because melange config requires strict format.
 
       - name: Build replicated chart
         env:
@@ -140,7 +140,7 @@ jobs:
             printf "user-set extraEnv should exist:\n\n%s\n\n" "$output"
             exit 1
           fi
-          
+
           cat << EOF > test-values.yaml 
           tolerations:
           - key: "test-toleration-key"