diff --git a/.github/workflows/release_branches.yml b/.github/workflows/release_branches.yml
index d210c8ac7103..a06264449dfc 100644
--- a/.github/workflows/release_branches.yml
+++ b/.github/workflows/release_branches.yml
@@ -3,6 +3,10 @@ name: ReleaseBranchCI
 env:
   # Force the stdout and stderr streams to be unbuffered
   PYTHONUNBUFFERED: 1
+  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+  AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
+  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+
 
 on: # yamllint disable-line rule:truthy
   pull_request:
diff --git a/tests/ci/git_helper.py b/tests/ci/git_helper.py
index 10f17f083889..dce9a0e993d5 100644
--- a/tests/ci/git_helper.py
+++ b/tests/ci/git_helper.py
@@ -10,10 +10,13 @@
 
 # ^ and $ match subline in `multiple\nlines`
 # \A and \Z match only start and end of the whole string
+# NOTE (vnemkov): support both upstream tag style: v22.x.y.z-lts and Altinity tag style: v22.x.y.z.altinitystable
+# Because at early release stages there could be no Altinity tag set on commit, only upstream one.
 RELEASE_BRANCH_REGEXP = r"\A\d+[.]\d+\Z"
 TAG_REGEXP = (
-    r"\Av\d{2}[.][1-9]\d*[.][1-9]\d*[.][1-9]\d*-(testing|prestable|stable|lts|altinitystable)\Z"
+    r"\Av\d{2}[.][1-9]\d*[.][1-9]\d*[.][1-9]\d*[-\.](testing|prestable|stable|lts|altinitystable)\Z"
 )
+
 SHA_REGEXP = r"\A([0-9]|[a-f]){40}\Z"
 
 CWD = p.dirname(p.realpath(__file__))