From 5bf008f7d2460b500085eb948ce416a475131f6c Mon Sep 17 00:00:00 2001
From: Dmitriy Ivolgin <dmitriy@replicated.com>
Date: Fri, 21 Aug 2026 11:27:04 -0700
Subject: [PATCH] Use all tags when building with securebuild (#2119)

---
 .github/workflows/publish-securebuild.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish-securebuild.yml b/.github/workflows/publish-securebuild.yml
index d78a81f7..9e9c5f25 100644
--- a/.github/workflows/publish-securebuild.yml
+++ b/.github/workflows/publish-securebuild.yml
@@ -1,8 +1,8 @@
 name: publish-securebuild
 
 env:
-  SECUREBUILD_CLI_VERSION: v0.0.496
-  SECUREBUILD_CLI_SHA256: af016db0fa16d51f68f443dea31a63152ad23504bb296137b01f270102011f79
+  SECUREBUILD_CLI_VERSION: v0.0.498
+  SECUREBUILD_CLI_SHA256: d259aa99d85aef957fe1e40c6f26e1983cc7fd72277e08599a82adc6681d3b37
 
 on:
   workflow_call:
@@ -88,7 +88,14 @@ jobs:
           SECUREBUILD_API_TOKEN: ${{ secrets.SECUREBUILD_API_TOKEN }}
           VERSION: ${{ needs.build-package.outputs.version }}
         run: |
+          IMAGE_VERSION="${VERSION#v}"
+          MAJOR_MINOR_VERSION="${IMAGE_VERSION%.*}"
+          MAJOR_VERSION="${IMAGE_VERSION%%.*}"
+
           ./securebuild build image \
             --image-name "$IMAGE_NAME" \
             --tag "$VERSION" \
+            --image-tag "$MAJOR_MINOR_VERSION" \
+            --image-tag "$MAJOR_VERSION" \
+            --image-tag latest \
             --api-token "$SECUREBUILD_API_TOKEN"