diff --git a/.github/workflows/advisories.yml b/.github/workflows/advisories.yml
index d32f2f2..221a5bf 100644
--- a/.github/workflows/advisories.yml
+++ b/.github/workflows/advisories.yml
@@ -41,7 +41,7 @@ jobs:
         run: |
           ./gradlew parseGithubAdvisoryDatabase --args="./advisory-database Maven src/main/resources/advisories-maven.csv"
           sort --output=src/main/resources/advisories-maven.csv src/main/resources/advisories-maven.csv
-          git diff-index --quiet HEAD src/main/resources/advisories-maven.csv || git commit --message "${{ env.MSG }}" src/main/resources/advisories-maven.csv && git push origin main
+          git diff-index --quiet HEAD src/main/resources/advisories-maven.csv || (git commit --message "${{ env.MSG }}" src/main/resources/advisories-maven.csv && git push origin main)
 
       # Load SSH deploy-key
       - uses: webfactory/ssh-agent@v0.9.0
@@ -55,5 +55,5 @@ jobs:
           ./gradlew parseGithubAdvisoryDatabase --args="./advisory-database NPM rewrite-nodejs/src/main/resources/advisories-npm.csv"
           cd rewrite-nodejs/
           sort --output=src/main/resources/advisories-npm.csv src/main/resources/advisories-npm.csv
-          git diff-index --quiet HEAD src/main/resources/advisories-npm.csv || git commit --message "${{ env.MSG }}" src/main/resources/advisories-npm.csv && git push origin main
+          git diff-index --quiet HEAD src/main/resources/advisories-npm.csv || (git commit --message "${{ env.MSG }}" src/main/resources/advisories-npm.csv && git push origin main)
 
diff --git a/.github/workflows/migrations.yml b/.github/workflows/migrations.yml
index 005d04d..a85f946 100644
--- a/.github/workflows/migrations.yml
+++ b/.github/workflows/migrations.yml
@@ -40,4 +40,4 @@ jobs:
         run: echo "NOW=$(date +'%Y-%m-%dT%H%M')" >> $GITHUB_ENV
       - name: Commit and push
         run: |
-          git diff-index --quiet HEAD src/main/resources/migrations.csv || git commit -m "[Auto] Old GroupId migrations as of ${{ env.NOW }}" src/main/resources/migrations.csv && git push origin main
+          git diff-index --quiet HEAD src/main/resources/migrations.csv || (git commit -m "[Auto] Old GroupId migrations as of ${{ env.NOW }}" src/main/resources/migrations.csv && git push origin main)