diff --git a/.github/workflows/sherlock-deploy-webhook-proxy.yaml b/.github/workflows/sherlock-deploy-webhook-proxy.yaml
index d8c5014cf..74495d33a 100644
--- a/.github/workflows/sherlock-deploy-webhook-proxy.yaml
+++ b/.github/workflows/sherlock-deploy-webhook-proxy.yaml
@@ -5,7 +5,7 @@ on:
     branches:
       - main
     paths:
-      - ".github/workflows/sherlock-webhook-proxy-deploy.yaml"
+      - ".github/workflows/sherlock-deploy-webhook-proxy.yaml"
       - "sherlock-webhook-proxy/**"
       - "sherlock-go-client/**"
       - "!**/*.md"
@@ -20,7 +20,8 @@ jobs:
   tag-build-publish:
     runs-on: ubuntu-latest
     permissions:
-      contents: "read"
+      # Push to the main branch
+      contents: "write"
       # Use OIDC for workload identity
       id-token: "write"
     steps:
@@ -43,3 +44,11 @@ jobs:
 
       - name: Deploy
         run: make deploy-webhook-proxy
+
+      - name: Commit and push changes
+        uses: stefanzweifel/git-auto-commit-action@v5
+        with:
+          commit_message: |
+            [sherlock-deploy-webhook-proxy] generated from ${{ github.sha }}
+          commit_user_name: broadbot
+          commit_user_email: broadbot@broadinstitute.org
diff --git a/makefile b/makefile
index 793486ea6..5e70df347 100644
--- a/makefile
+++ b/makefile
@@ -79,6 +79,7 @@ generate-mocks:
 # go.mod)
 deploy-webhook-proxy:
 	cd sherlock-webhook-proxy \
+		&& go mod tidy \
 		&& go mod vendor \
 		&& gcloud functions deploy sherlock-webhook-proxy \
 			--gen2 \