diff --git a/.github/workflows/semantic-release.yaml b/.github/workflows/semantic-release.yaml
index 2e99acc..6733921 100644
--- a/.github/workflows/semantic-release.yaml
+++ b/.github/workflows/semantic-release.yaml
@@ -9,5 +9,7 @@ on:
 jobs:
   call-reusable-release:
     uses: xebis/github-actions-and-workflows/.github/workflows/semantic-release.yaml@main
+    with:
+      GH_APP_ID: ${{ vars.GH_APP_SEM_REL_ID }}
     secrets:
-      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      GH_APP_PEM_FILE: ${{ secrets.GH_APP_SEM_REL_PEM_FILE }}
diff --git a/xebis.yaml b/xebis.yaml
index 0b46865..1ad9150 100644
--- a/xebis.yaml
+++ b/xebis.yaml
@@ -18,12 +18,10 @@ organization:
               - ~DEFAULT_BRANCH
         rules:
           creation: true
-          update: true
           deletion: true
           pull_request:
             required_approving_review_count: 0
           required_linear_history: true
-          required_signatures: true
 repositories:
   - name: .github
     description: Xebis organization profile and management.