diff --git a/.github/workflows/patch.yaml b/.github/workflows/patch.yaml
index 35c4d2c..8dc2e45 100644
--- a/.github/workflows/patch.yaml
+++ b/.github/workflows/patch.yaml
@@ -44,6 +44,10 @@ jobs:
             vuln_count=$(jq '.Results | length' "$report_file")
             echo "vuln_count=$vuln_count" >> $GITHUB_OUTPUT
 
+        - name: Set Tag
+          id: set_tag
+          run: echo "::set-env name=PATCHED_TAG::$(echo "${{ matrix.images }}" | cut -d':' -f2 | cut -d'/' -f2 | sed 's/[^0-9.]*//g')-immunized"
+
         - name: Copa Action
           if: steps.vuln_count.outputs.vuln_count != '0'
           id: copa
@@ -51,7 +55,7 @@ jobs:
           with:
             image: ${{ matrix.images }}
             image-report: 'report.json'
-            patched-tag: ${{ join([split(':', matrix.images[0])[1], 'immunized'], '-') }}
+            patched-tag: ${{ env.PATCHED_TAG }}
             buildkit-version: 'v0.11.6'
             # optional, default is latest
             copa-version: '0.3.0'