From what i have seen (and done) it is possible to think you are tagging master, when you are on the master branch, but since the remote and local master are not in sync (the sha's don't match) you end up tagging the sha of a branch or commit.

I did some research and looked at other gems that accomplish what we are doing here and they take similar precautions.