diff --git a/.github/workflows/checksums.yml b/.github/workflows/checksums.yml
index c927f72..5e97831 100644
--- a/.github/workflows/checksums.yml
+++ b/.github/workflows/checksums.yml
@@ -4,6 +4,8 @@ on:
     branches:
       - main
   pull_request:
+permissions:
+  contents: write
 jobs:
   checksums:
     runs-on: cn
@@ -24,9 +26,7 @@ jobs:
             filename=$(basename "$file");
             sha256sum -b "$file" | sed "s|$file|$filename|" > "${file}.sha256";
           done
+          git add -A
+          git commit -m "chore: update checksums" || true
+          git push origin ${{ github.ref }}
           unset IFS
-      - name: Commit changes
-        uses: actions/git-auto-commit-action@v5
-        with:
-          commit_message: "chore: update checksums"
-          file_pattern: "*.sha256"