ci: properly sanitize branch names for docker tags instead of hardcoding

Author: camille-004

.github/workflows/ci.yml

@@ -54,6 +54,8 @@ jobs:
     timeout-minutes: 30
     needs: check-changes
     if: needs.check-changes.outputs.source-changed == 'true'
+    outputs:
+      sanitized-branch: ${{ steps.branch.outputs.sanitized }}
     strategy:
       fail-fast: false
       matrix:
@@ -76,6 +78,13 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Sanitize branch name
+        id: branch
+        run: |
+          BRANCH_NAME="${{ github.ref_name }}"
+          SANITIZED_BRANCH=$(echo "$BRANCH_NAME" | sed 's/[^a-zA-Z0-9.-]/-/g')
+          echo "sanitized=$SANITIZED_BRANCH" >> $GITHUB_OUTPUT
+
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@v3
         with:
@@ -89,7 +98,7 @@ jobs:
         with:
           images: ghcr.io/nvidia/cutile-python/ci-py${{ matrix.python-version }}
           tags: |
-            type=sha,prefix={{branch}}-
+            type=sha,prefix=${{ steps.branch.outputs.sanitized }}-
 
       - name: Check disk space before build
         run: df -h
@@ -143,7 +152,7 @@ jobs:
     if: needs.check-changes.outputs.source-changed == 'true'
     timeout-minutes: 30
     container:
-      image: ghcr.io/nvidia/cutile-python/ci-py${{ matrix.python-version }}:${{ github.ref_name }}-${{ github.sha }}
+      image: ghcr.io/nvidia/cutile-python/ci-py${{ matrix.python-version }}:pull-request-1-${{ github.sha }}
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
@@ -176,7 +185,7 @@ jobs:
     if: always() && (needs.check-changes.outputs.source-changed == 'true' || needs.check-changes.outputs.docs-changed == 'true')
     timeout-minutes: 15
     container:
-      image: ghcr.io/nvidia/cutile-python/ci-py3.10:${{ github.ref_name }}-${{ github.sha }}
+      image: ghcr.io/nvidia/cutile-python/ci-py3.10:${{ needs.build-ci-images.outputs.sanitized-branch }}-${{ github.sha }}
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}