diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 05f4216..c051af8 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -16,13 +16,15 @@ jobs:
     permissions:
       id-token: write
       contents: read
+    env:
+      IMAGE_TAG: "public.ecr.aws/primaassicurazioni/webkit-pdf-inator:${{ inputs.tag_name || github.event.release.tag_name }}"
     steps:
       - uses: actions/checkout@v4
       - uses: cachix/install-nix-action@8887e596b4ee1134dae06b98d573bd674693f47c
       - uses: DeterminateSystems/magic-nix-cache-action@87b14cf437d03d37989d87f0fa5ce4f5dc1a330b
 
       - run: nix build .#dockerImage
-      - run: docker load -i ./result
+      - run: docker tag "$(docker load -q -i ./result)" "$IMAGE_TAG"
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@v2
@@ -38,6 +40,4 @@ jobs:
           registry-type: public
 
       - name: Push image
-        run: |-
-           docker push webkit-pdf-inator \
-           "public.ecr.aws/primaassicurazioni/webkit-pdf-inator:${{ inputs.tag_name || github.event.release.tag_name }}"
+        run: docker push "$IMAGE_TAG"