diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2d71a0e5..33963a26 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -184,9 +184,15 @@ jobs:
           NEW_VERSION: ${{ steps.sampo-release.outputs.new_version }}
           COMMIT_HASH: ${{ steps.commit-release.outputs.commit-hash }}
         run: |
+          TAG_SHA=$(gh api "repos/${{ github.repository }}/git/tags" \
+            -f "tag=v${NEW_VERSION}" \
+            -f "message=Release v${NEW_VERSION}" \
+            -f "object=${COMMIT_HASH}" \
+            -f "type=commit" \
+            -q '.sha')
           gh api "repos/${{ github.repository }}/git/refs" \
-            -f "ref=refs/tags/v$NEW_VERSION" \
-            -f "sha=$COMMIT_HASH"
+            -f "ref=refs/tags/v${NEW_VERSION}" \
+            -f "sha=${TAG_SHA}"
 
       - name: Create GitHub Release
         if: steps.commit-release.outputs.commit-hash != ''
diff --git a/.sampo/changesets/roguish-runesmith-ukko.md b/.sampo/changesets/roguish-runesmith-ukko.md
new file mode 100644
index 00000000..f1874ebd
--- /dev/null
+++ b/.sampo/changesets/roguish-runesmith-ukko.md
@@ -0,0 +1,5 @@
+---
+pypi/posthog: patch
+---
+
+chore(ci): attribute release tag to GitHub App