By deferring the evaluation of TAG, we risk the date changing mid-build leading to images from the same make invocation having different tags.