diff --git a/.github/workflows/build-whisper-docker.yml b/.github/workflows/build-whisper-docker.yml
index fbd4ab44..c2a45e14 100644
--- a/.github/workflows/build-whisper-docker.yml
+++ b/.github/workflows/build-whisper-docker.yml
@@ -44,6 +44,11 @@ jobs:
         uses: docker/metadata-action@v5
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+      - uses: aws-actions/configure-aws-credentials@v4
+        name: Configure AWS credentials for pushing to ECR
+        with:
+          role-to-assume: ${{ secrets.INVESTIGATIONS_GITHUB_ACTIONS_ROLE_ARN }}
+          aws-region: eu-west-1
       - name: Login to Amazon ECR
         id: login-ecr
         uses: aws-actions/amazon-ecr-login@v2
@@ -63,9 +68,5 @@ jobs:
            - ${{ secrets.TRANSCRIPTION_SERVICE_ECR_URI }}:latest
            - ${{ secrets.TRANSCRIPTION_SERVICE_ECR_URI }}$GITHUB_RUN_NUMBER
           labels: ${{ steps.meta.outputs.labels }}
-      - uses: aws-actions/configure-aws-credentials@v4
-        name: Configure AWS credentials for pushing to ECR
-        with:
-          role-to-assume: ${{ secrets.INVESTIGATIONS_GITHUB_ACTIONS_ROLE_ARN }}
-          aws-region: eu-west-1
+