diff --git a/.github/workflows/create-releases.yml b/.github/workflows/create-releases.yml
index 26cf3d5a..ec85cc67 100644
--- a/.github/workflows/create-releases.yml
+++ b/.github/workflows/create-releases.yml
@@ -60,6 +60,8 @@ jobs:
           git_config_global: true
           git_user_signingkey: true
           git_commit_gpgsign: true
+          git_tag_gpgsign: true
+          git_push_gpgsign: true
       - name: Install jq and curl
         run: sudo apt-get install -y jq curl
       - name: Create a release
diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
index 9d302195..1723ae48 100644
--- a/.github/workflows/release-notes.yml
+++ b/.github/workflows/release-notes.yml
@@ -49,6 +49,8 @@ jobs:
           ref: 'v${{ inputs.tags }}'
       - name: Setup CI
         uses: ./.github/actions/setup-repo
+        with:
+          python-version: '3.11'
       - name: Create release notes
         run: ./.github/actions/create_release_and_archive.sh ${{ inputs.tags }}
       - name: Download Python artifacts
@@ -90,6 +92,8 @@ jobs:
           fetch-depth: 0
       - name: Setup CI
         uses: ./.github/actions/setup-repo
+        with:
+          python-version: '3.11'
       - name: Import bot's GPG key for signing commits
         id: import-gpg
         uses: crazy-max/ghaction-import-gpg@v5
@@ -99,6 +103,8 @@ jobs:
           git_config_global: true
           git_user_signingkey: true
           git_commit_gpgsign: true
+          git_tag_gpgsign: true
+          git_push_gpgsign: true
       - name: Install jq and curl
         run: sudo apt-get install -y jq curl
       - name: Bump version to dev