add git to alpine

.gitlab-ci.yml

 ---
 workflow:
   rules:
-    - if: $CI_PIPELINE_SOURCE == "merge_request_event" || ($CI_PIPELINE_SOURCE == "push" && ($CI_COMMIT_BRANCH == "main" || $CI_COMMIT_BRANCH == "stable"))
+    - if:
+        ${CI_PIPELINE_SOURCE} == "merge_request_event" || (${CI_PIPELINE_SOURCE} ==
+        "push" && (${CI_COMMIT_BRANCH} == "main" || ${CI_COMMIT_BRANCH} ==
+        "stable"))
       when: always
     - when: never
 variables:
-  version: 0.0.$CI_PIPELINE_IID
+  version: 0.0.${CI_PIPELINE_IID}
   stable_branch: main
   release_tag_prefix: v
 stages:
@@ -22,13 +25,18 @@ test_job:
 build_job:
   stage: build
   rules:
-    - if: $CI_COMMIT_REF_NAME =~ /stable/
+    - if: ${CI_COMMIT_REF_NAME} =~ /stable/
       when: always
   image: public.ecr.aws/docker/library/golang:1.21
   parallel:
     matrix:
-      - GOOS: [linux, darwin, windows]
-        GOARCH: [amd64, arm64]
+      - GOOS:
+          - linux
+          - darwin
+          - windows
+        GOARCH:
+          - amd64
+          - arm64
   script: |
     go build -o webservice_${GOOS}_${GOARCH}.bin ./*.go
   artifacts:
@@ -38,7 +46,7 @@ build_job:
 publish_job:
   stage: publish
   rules:
-    - if: $CI_COMMIT_REF_NAME =~ /stable/
+    - if: ${CI_COMMIT_REF_NAME} =~ /stable/
       when: always
   image: public.ecr.aws/docker/library/alpine:latest
   tags:
@@ -57,6 +65,11 @@ job_tag_stable_branch:
   stage: tag
   only:
     - main
+  image: public.ecr.aws/docker/library/alpine:latest
+  tags:
+    - docker-privileged
+  before_script:
+    - apk add --no-cache git
   script:
-    - git tag "$release_tag_prefix$version"
-    - git push origin "$release_tag_prefix$version"
+    - git tag "${release_tag_prefix}${version}"
+    - git push origin "${release_tag_prefix}${version}"