fix security issue on workflow

Author: dedece35

.github/workflows/tag_release.yml

@@ -36,9 +36,15 @@ jobs:
 
       - name: Resolve release tag
         id: resolve_tag
+        env:
+          INPUT_TAG: ${{ inputs.tag }}
         run: |
-          if [ -n "${{ inputs.tag }}" ]; then
-            RELEASE_TAG="${{ inputs.tag }}"
+          if [ -n "$INPUT_TAG" ]; then
+            if ! [[ "$INPUT_TAG" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+              echo "Invalid tag format: '$INPUT_TAG'. Expected format: X.Y.Z"
+              exit 1
+            fi
+            RELEASE_TAG="$INPUT_TAG"
           else
             RELEASE_TAG=$(git tag --sort=-version:refname | grep -E '^[0-9]+\.[0-9]+\.[0-9]+$' | head -n 1)
           fi
@@ -85,4 +91,4 @@ jobs:
           generate_release_notes: true
           draft: false
           prerelease: false
-          files: ${{ env.jar_path }}
+          files: ${{ env.jar_path }}