diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index a9922c0ba1424a25a7573453bd3aec5e6b30441d..509940d7f1d8aaae6323b558a721385ace5981cb 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -44,14 +44,15 @@ dist:
 
 tag-latest:
   stage: deploy
-  image: alpine/git
-  script:
+  image: datamachines/git-lfs
+  before_script:
+    - git config http.sslverify false
     - git config user.email "${GITLAB_USER_EMAIL}"
     - git config user.name "${GITLAB_USER_NAME}"
-    - git remote add tag-origin https://oauth2:${GITLAB_ACCESS_TOKEN}@gitlab.in2p3.fr/${CI_PROJECT_PATH}
-    - git push --delete tag-origin latest
-    - git tag latest
-    - git push tag-origin latest
+    - git remote set-url origin https://gitlab-ci:${GITLAB_CI_TOKEN}@${CI_SERVER_HOST}/${CI_PROJECT_PATH}.git
+  script:
+    - git tag --force latest
+    - git push --force origin latest
   rules:
     - if: '$CI_COMMIT_TAG =~ /^v\d+(?:\.\d+){0,2}$/'