It is quite tedious to have to tag them manually, and easy to forget.

What would a solution here look like? Simply adding some tagging to the end of the pipeline, and pushing that tag. We could simply use the github actions user or similar for it.