diff --git a/azure-pipelines/signing.yml b/azure-pipelines/signing.yml
index 19041ab917..b0df765575 100644
--- a/azure-pipelines/signing.yml
+++ b/azure-pipelines/signing.yml
@@ -542,24 +542,7 @@ extends:
             artifactName: Drop
             targetPath: $(Build.ArtifactStagingDirectory)/drop
         steps:
-        - task: DownloadSecureFile@1
-          displayName: Download Deploy Key
-          name: githubDeployKey
-          inputs:
-            secureFile: id_vcpkg_tool
-          # GitHub has a large, regularly changing set of IP address, so ignore the
-          # hostname and allow anything with the right key.
-          # https://docs.github.com/en/github/authenticating-to-github/keeping-your-account-and-data-secure/about-githubs-ip-addresses
-          # This public key should have the well-known fingerprint documented below.
-          # SHA256:uNiVztksCsDhcc0u9e8BujQXVUpKZIDTMczCvj3tD2s
-          # https://docs.github.com/en/github/authenticating-to-github/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
-        - script: mkdir %USERPROFILE%\.ssh && echo github.com ssh-rsa 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>>%USERPROFILE%\.ssh\known_hosts
-          displayName: Store GitHub Public Key
-        - script: git -c user.email=embeddedbot@microsoft.com -c user.name="Embedded Bot" push git@github.com:microsoft/vcpkg-tool HEAD:refs/tags/%VCPKG_BASE_VERSION%
-          env:
-            GIT_SSH_COMMAND: ssh -i "$(githubDeployKey.secureFilePath)"
-          displayName: Push Release Tag
-        - task: GitHubRelease@0
+        - task: GitHubRelease@1
           displayName: Publish GitHub Release
           inputs:
             gitHubConnection: embeddedbot
@@ -567,8 +550,7 @@ extends:
             isPreRelease: true
             isDraft: true
             title: $(VCPKG_BASE_VERSION) Release
-            tagSource: manual
+            tagSource: userSpecifiedTag
             tag: $(VCPKG_BASE_VERSION)
             assets: "$(Build.ArtifactStagingDirectory)\\drop\\*"
             addChangeLog: false
-            compareWith: 'lastFullRelease'