diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 0d10e57..9ba3537 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -180,9 +180,10 @@ jobs:
         run: |
           $version = "${{ steps.extract_version.outputs.version }}"
           $tag = "v$version"
+          $sha = "${{ gitea.sha }}"
           $tagLine = (git ls-remote --tags origin "refs/tags/$tag" | Select-Object -First 1)
           if ([string]::IsNullOrWhiteSpace($tagLine)) {
-            git tag "$tag"
+            git tag -a "$tag" -m "Release $tag" "$sha"
             git push origin "$tag"
           } else {
             Write-Host "Tag $tag already exists on origin, skipping tag push."
@@ -196,6 +197,7 @@ jobs:
           repository: ${{ gitea.repository }}
           token: ${{ secrets.API_TOKEN }}
           tag_name: v${{ steps.extract_version.outputs.version }}
+          target_commitish: ${{ gitea.sha }}
           name: Anabasis Manager ${{ steps.extract_version.outputs.version }}
           body: |
             Desktop release v${{ steps.extract_version.outputs.version }}