diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5e6a9c2b2..2eb6f0812 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -71,25 +71,24 @@ jobs:
           name: homebrew-formula
           path: homebrew-formula
 
+      - name: Generate Homebrew app token
+        id: app-token
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
+        with:
+          app-id: ${{ secrets.RELEASE_APP_ID }}
+          private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
+          owner: auth0
+          repositories: homebrew-auth0-cli
+          permission-contents: write
+          permission-pull-requests: write
+
       - name: Checkout Homebrew Tap Repo
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: auth0/homebrew-auth0-cli
-          token: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
           path: homebrew-auth0-cli
 
-      - name: Import GPG key for Homebrew Tap
-        uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7.0.0
-        with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.GPG_PASSPHRASE }}
-          git_user_signingkey: true
-          git_commit_gpgsign: true
-          git_tag_gpgsign: true
-          git_committer_email: auth0-cli-cd-sa@okta.com
-          git_committer_name: auth0
-          workdir: 'homebrew-auth0-cli'
-
       - name: Copy Brew Formula
         run: |
           cp homebrew-formula/*.rb homebrew-auth0-cli/
@@ -97,13 +96,13 @@ jobs:
       - name: Create Homebrew Pull Request
         uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
-          token: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
           commit-message: "Brew formula update for auth0-cli version ${{ github.ref_name }}"
           branch: ${{ github.ref_name }}
           title: "Brew formula update for auth0-cli version ${{ github.ref_name }}"
           body: "This PR updates the Homebrew formula for version ${{ github.ref_name }}."
           base: main
-          committer: auth0 <auth0-cli-cd-sa@okta.com>
+          sign-commits: true
           path: homebrew-auth0-cli
 
   scoop:
@@ -119,37 +118,36 @@ jobs:
           name: scoop-manifest
           path: scoop-manifest
 
+      - name: Generate Scoop app token
+        id: app-token
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
+        with:
+          app-id: ${{ secrets.RELEASE_APP_ID }}
+          private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
+          owner: auth0
+          repositories: scoop-auth0-cli
+          permission-contents: write
+          permission-pull-requests: write
+
       - name: Checkout Scoop Repo
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: auth0/scoop-auth0-cli
-          token: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
           path: scoop-auth0-cli
 
       - name: Copy Scoop Manifest
         run: |
           cp scoop-manifest/*.json scoop-auth0-cli/
 
-      - name: Import GPG key for Scoop
-        uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7.0.0
-        with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.GPG_PASSPHRASE }}
-          git_user_signingkey: true
-          git_commit_gpgsign: true
-          git_tag_gpgsign: true
-          git_committer_email: auth0-cli-cd-sa@okta.com
-          git_committer_name: auth0
-          workdir: 'scoop-auth0-cli'
-
       - name: Create Scoop Pull Request
         uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
-          token: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
           commit-message: "Scoop manifest update for auth0-cli version ${{ github.ref_name }}"
           branch: ${{ github.ref_name }}
           title: "Scoop manifest update for auth0-cli version ${{ github.ref_name }}"
           body: "This PR updates the Scoop manifest for version ${{ github.ref_name }}."
           base: main
-          committer: auth0 <auth0-cli-cd-sa@okta.com>
+          sign-commits: true
           path: scoop-auth0-cli