diff --git a/.tekton/build-pipeline.yaml b/.tekton/build-pipeline.yaml
index b38cdcc8..68856ef2 100644
--- a/.tekton/build-pipeline.yaml
+++ b/.tekton/build-pipeline.yaml
@@ -105,6 +105,10 @@ spec:
       default: docker
       type: string
       description: The format for the resulting image's mediaType. Valid values are oci or docker.
+    - default: []
+      description: Additional labels to apply to the built container image
+      name: additional-labels
+      type: array
   results:
     - description: ''
       name: IMAGE_URL
@@ -250,12 +254,13 @@ spec:
         - name: LABELS
           value:
             - $(tasks.generate-labels.results.labels[*])
+            - $(params.additional-labels[*])
             - com.redhat.component=recert
             - description=recert
             - distribution-scope=public
             - io.k8s.description=recert
-            - name=openshift4/recert-rhel9
             - release=4.18
+            - cpe="cpe:/a:redhat:openshift:4.18::el9"
             - url=https://github.com/rh-ecosystem-edge/recert
             - vendor=Red Hat, Inc.
             - io.k8s.display-name=recert
diff --git a/.tekton/recert-4-18-pull-request.yaml b/.tekton/recert-4-18-pull-request.yaml
index 18a02b86..1e7f22bd 100644
--- a/.tekton/recert-4-18-pull-request.yaml
+++ b/.tekton/recert-4-18-pull-request.yaml
@@ -69,6 +69,9 @@ spec:
       value: "true"
     - name: additional-tags
       value: []
+    - name: additional-labels
+      value:
+        - name=openshift4/recert-rhel9
   pipelineRef:
     name: build-pipeline
   taskRunTemplate:
diff --git a/.tekton/recert-4-18-push.yaml b/.tekton/recert-4-18-push.yaml
index 6fae0358..4de87b10 100644
--- a/.tekton/recert-4-18-push.yaml
+++ b/.tekton/recert-4-18-push.yaml
@@ -67,6 +67,9 @@ spec:
       value: "true"
     - name: additional-tags
       value: ["latest"]
+    - name: additional-labels
+      value:
+        - name=openshift4/recert-rhel9
   pipelineRef:
     name: build-pipeline
   taskRunTemplate: