Fix actions/checkout#439

Author: hathagat

.github/workflows/build.yml

@@ -17,6 +17,9 @@ env:
 jobs:
   update:
     runs-on: ubuntu-latest
+    outputs:
+      commit_hash: ${{ steps.commit-and-push.outputs.commit_hash }}
+
     steps:
     - uses: actions/checkout@v3
     - name: Update Dockerfile
@@ -42,20 +45,11 @@ jobs:
         
         END
 
-    - name: Commit updates
-      run: |
-        if [ -n "$(git status --porcelain)" ]; then
-          git config --local user.email "workflow@github.com"
-          git config --local user.name "GitHub Workflow"
-          git add -A
-          git commit -m "Apply updates from Nginx repository"
-        fi
-        
-    - name: Push changes
-      uses: ad-m/github-push-action@master
+    - name: Commit and push changes
+      id: commit-and-push
+      uses: stefanzweifel/git-auto-commit-action@v4
       with:
-        github_token: ${{ secrets.GITHUB_TOKEN }}
-        force: true
+        commit_message: Apply updates from Nginx repository
 
   build:
     needs: update
@@ -64,10 +58,13 @@ jobs:
       contents: read
       packages: write
       id-token: write
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
-        
+        with:
+          ref: ${{ needs.update.outputs.commit_hash }}
+
       - name: Install cosign
         if: github.event_name != 'pull_request'
         uses: sigstore/cosign-installer@main