diff --git a/.github/workflows/step-tag-release.yml b/.github/workflows/step-tag-release.yml
index 72b2a0a..656db89 100644
--- a/.github/workflows/step-tag-release.yml
+++ b/.github/workflows/step-tag-release.yml
@@ -20,9 +20,11 @@ jobs:
           token: ${{ secrets.github-token }}
       - name: Create tag
         env:
+          GH_TOKEN: ${{ secrets.github-token }}
           VERSION: ${{ inputs.version }}
         run: |
+          gh auth setup-git
           git config --global user.name "GitHub Action Bot"
           git config --global user.email "baynezy@gmail.com"
-          git tag -a $VERSION -m "Version $VERSION created via GitHub Actions"
-          git push origin $VERSION
+          git tag -a "$VERSION" -m "Version $VERSION created via GitHub Actions"
+          git push origin "$VERSION"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5b9d6e6..b82a738 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,7 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 - Replaced the legacy workflow git email address with `baynezy@gmail.com` in GitHub Actions workflows (#692)
-- Updated the release tagging workflow to use the repository automation token so tags can still be created when the tagged commit includes workflow changes (#742)
+- Updated the release tagging workflow to explicitly authenticate tag pushes with the repository automation token so tags can still be created when the tagged commit includes workflow changes (#742)
 
 ## [7.1.2.20] - 2025-12-26