job added to deploy tagged image

.gitlab-ci.yml

 variables:
+  PANDOC_IMAGE_BASENAME: $CI_REGISTRY_IMAGE/pandoc
   PANDOC_IMAGE: $CI_REGISTRY_IMAGE/pandoc:$CI_COMMIT_REF_NAME
 
 stages:
 - prepare
 - build
+- deploy
 
 before_script:
 
@@ -13,10 +15,21 @@ BuildPandocImage:
   tags:
   - docker
   script:
-  - docker build --build-arg VCS_REF=$CI_COMMIT_REF_NAME --tag=$PANDOC_IMAGE --file=Dockerfile.pandoc .
+  - docker build --build-arg VCS_REF=$CI_COMMIT_SHA --tag=$PANDOC_IMAGE --file=Dockerfile.pandoc .
   - docker login -u gitlab-ci-token -p $CI_JOB_TOKEN $CI_REGISTRY
   - docker push $PANDOC_IMAGE
 
+TagPandocImage:
+  image: docker:latest
+  stage: deploy
+  only:
+  - tags
+  tags:
+  - docker
+  script:
+  - docker login -u gitlab-ci-token -p $CI_JOB_TOKEN $CI_REGISTRY
+  - docker image tag $PANDOC_IMAGE $PANDOC_IMAGE_BASENAME:$CI_COMMIT_TAG
+
 .job_template: &job_definition
   image: $PANDOC_IMAGE
   stage: build