diff --git a/.github/workflows/tag.yml b/.github/workflows/tag.yml
index 77c66d0e5..a2d943156 100644
--- a/.github/workflows/tag.yml
+++ b/.github/workflows/tag.yml
@@ -15,7 +15,12 @@ jobs:
         repository: fireeye/capa-rules
         token: ${{ secrets.CAPA_TOKEN }}
     - name: Tag capa-rules
-      run: git tag ${{ github.event.release.tag_name }}
+      run: |
+        # user information is needed to create annotated tags (with a message)
+        git config user.email 'capa-dev@fireeye.com'
+        git config user.name 'Capa Bot'
+        name=${{ github.event.release.tag_name }}
+        git tag $name -m "https://github.com/fireeye/capa/releases/$name"
     - name: Push tag to capa-rules
       uses: ad-m/github-push-action@master
       with:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4f6c083bb..882c6b4ba 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,8 @@
 
 ### Development
 
+- ci: add capa release link to capa-rules tag #517 @Ana06
+
 ### Raw diffs
 - [capa v1.6.1...master](https://github.com/fireeye/capa/compare/v1.6.1...master)
 - [capa-rules v1.6.1...master](https://github.com/fireeye/capa-rules/compare/v1.6.1...master)