diff --git a/.cicd/create-docker-from-binary.sh b/.cicd/create-docker-from-binary.sh
index 42bbfc47569..5c3c3a234d0 100755
--- a/.cicd/create-docker-from-binary.sh
+++ b/.cicd/create-docker-from-binary.sh
@@ -16,7 +16,11 @@ echo "$ $DOCKER_BUILD"
 eval $DOCKER_BUILD
 # docker tag
 echo '--- :label: Tag Container'
-REGISTRIES=("$EOSIO_REGISTRY" "$DOCKERHUB_REGISTRY")
+if [[ "$BUILDKITE_PIPELINE_SLUG" =~ "-sec" ]] ; then
+    REGISTRIES=("$EOSIO_REGISTRY")
+else
+    REGISTRIES=("$EOSIO_REGISTRY" "$DOCKERHUB_REGISTRY")
+fi
 for REG in ${REGISTRIES[@]}; do
     DOCKER_TAG_BRANCH="docker tag '$IMAGE' '$REG:$SANITIZED_BRANCH'"
     echo "$ $DOCKER_TAG_BRANCH"
diff --git a/.cicd/helpers/general.sh b/.cicd/helpers/general.sh
index 4de9bb626b2..cc2b4cc24e0 100644
--- a/.cicd/helpers/general.sh
+++ b/.cicd/helpers/general.sh
@@ -7,8 +7,13 @@ export MOUNTED_DIR='/eos'
 export DOCKER_CLI_EXPERIMENTAL='enabled'
 export DOCKERHUB_CI_REGISTRY="docker.io/eosio/ci"
 export DOCKERHUB_CONTRACTS_REGISTRY="docker.io/eosio/ci-contracts-builder"
-export CI_REGISTRIES=("$DOCKERHUB_CI_REGISTRY" "$MIRROR_REGISTRY")
-export CONTRACT_REGISTRIES=("$DOCKERHUB_CONTRACTS_REGISTRY" "$MIRROR_REGISTRY")
+if [[ "$BUILDKITE_PIPELINE_SLUG" =~ "-sec" ]] ; then
+    export CI_REGISTRIES=("$MIRROR_REGISTRY")
+    export CONTRACT_REGISTRIES=("$MIRROR_REGISTRY")
+else
+    export CI_REGISTRIES=("$DOCKERHUB_CI_REGISTRY" "$MIRROR_REGISTRY")
+    export CONTRACT_REGISTRIES=("$DOCKERHUB_CONTRACTS_REGISTRY" "$MIRROR_REGISTRY")
+fi
 
 # capitalize each word in a string
 function capitalize()