diff --git a/.github/workflows/sync-release-version.yml b/.github/workflows/sync-release-version.yml
index 3b0dd0c7..81cb8710 100644
--- a/.github/workflows/sync-release-version.yml
+++ b/.github/workflows/sync-release-version.yml
@@ -5,6 +5,28 @@ on:
 
 
 jobs:
+  create-sec-tag:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          ref: sec
+      - name: Get branch name
+        id: branch-name
+        uses: tj-actions/branch-names@v6
+
+      - name: Generate new tag
+        id: generate-tag
+        run: |
+          git tag -a ${{ steps.branch-name.outputs.tag }}-sec -m "Security release for ${{ steps.branch-name.outputs.tag }}"
+
+      - name: Push tag
+        uses: adm/git-push@master
+        with:
+          args: --follow-tags
+          github_token: ${{ secrets.PAT_TOKEN }}
+
   update-version:
     runs-on: ubuntu-latest
     steps: