diff --git a/.github/workflows/release-workflow.yml b/.github/workflows/release-workflow.yml
index 7279653..358aa75 100644
--- a/.github/workflows/release-workflow.yml
+++ b/.github/workflows/release-workflow.yml
@@ -21,18 +21,17 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
-          token: "${{ secrets.PAT }}"
+          ssh-key: "${{ secrets.COMMIT_KEY }}"
           fetch-depth: 0
+      - uses: webfactory/ssh-agent@v0.10.0
+        with:
+          ssh-private-key: ${{ secrets.COMMIT_KEY }}
       - uses: gradle/actions/setup-gradle@v6
       - name: Gradle Release
         if: ${{ inputs.versionIncrementer == 'default' }}
-        env:
-          DEPLOY_KEY: ${{ secrets.COMMIT_KEY }}
         run: ./gradlew release
       - name: Gradle Release w/ Increment Override
         if: ${{ inputs.versionIncrementer != 'default' }}
-        env:
-          DEPLOY_KEY: ${{ secrets.COMMIT_KEY }}
         run: ./gradlew release -Prelease.versionIncrementer=${{ inputs.versionIncrementer }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1af5e74..fe9ebf1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,9 @@
 - Update CI actions (checkout, artifact, setup-gradle, git-release) and runner image
 - Automate CHANGELOG release patching with the `org.jetbrains.changelog` plugin
 
+### Fixed
+- Release workflow authenticates via an SSH deploy key (`COMMIT_KEY`) instead of a stale PAT
+
 ## [0.2.0] - 2022-11-27
 ### Added
 - Separate publish and release creation action workflows