Only push images for branches, not commit-ids.
Pushing (tagging) images with the commit-ids would lead to a lot of tags in the registry. It would be ok to do if there was an easy automated way to prune old images. That seems to be possible via the registry API, but any clients that do that seem to be in some random untrusten github repos, and I'm reluctant to just hand them the API keys.