diff --git a/build_and_push_docker b/build_and_push_docker
old mode 100644
new mode 100755
index e891e22..f98cd22
--- a/build_and_push_docker
+++ b/build_and_push_docker
@@ -1,5 +1,8 @@
 #!/usr/bin/env bash
 
+# Stop immediately on any error so a failed build never gets tagged or pushed
+set -euo pipefail
+
 # Extract version from version.py
 if [ -f "version.py" ]; then
     VERSION=$(python3 -c "from version import VERSION; print(VERSION)")