diff --git a/.github/workflows/dependabot-build.yml b/.github/workflows/dependabot-build.yml
index cbdcc392..b76b183a 100644
--- a/.github/workflows/dependabot-build.yml
+++ b/.github/workflows/dependabot-build.yml
@@ -41,8 +41,11 @@ jobs:
         run: |
           npm run build
           npm run package
-
-      - name: Commit changes
-        if: ${{ steps.dependabot-metadata.outputs.package-ecosystem == 'npm_and_yarn' }}
-        id: commit
-        uses: stefanzweifel/git-auto-commit-action@8621497c8c39c72f3e2a999a26b4ca1b5058a842 #v5.0.1
+      - name: Commit and push if it changed
+      run: |-
+        git config user.name "Anchore Automated"
+        git config user.email "actions@users.noreply.github.com"
+        git add -A
+        timestamp=$(date -u)
+        git commit --signoff -m "Latest build: ${timestamp}" || exit 0
+        git push