the trusted build uses the repo name and a tag, so :base it is