diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d0f276a..23d3e46 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -82,6 +82,7 @@ jobs:
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.base.ref }}
+          persist-credentials: false
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -221,9 +222,11 @@ jobs:
             git tag -a "v${NEXT_VERSION}" -m "Release v${NEXT_VERSION} for #${PR_NUMBER}"
           fi
 
-          git push origin "HEAD:${BASE_BRANCH}"
-          git push origin "v${NEXT_VERSION}"
+          auth_header="AUTHORIZATION: bearer ${GITHUB_TOKEN}"
+          git -c http.https://github.com/.extraheader="$auth_header" push origin "HEAD:${BASE_BRANCH}"
+          git -c http.https://github.com/.extraheader="$auth_header" push origin "v${NEXT_VERSION}"
         env:
           BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
           NEXT_VERSION: ${{ steps.release.outputs.next_version }}
           PR_NUMBER: ${{ github.event.pull_request.number }}
+          GITHUB_TOKEN: ${{ github.token }}