git-tags and commit-ish verification alongside with semver