try pat instead

.github/workflows/image-update.yaml

@@ -19,6 +19,7 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           ref: ${{ github.head_ref }}
+          persist-credentials: false
 
       - name: Install Zarf
         uses: defenseunicorns/setup-zarf@main
@@ -32,10 +33,14 @@ jobs:
       - name: Update Images
         uses: ./.github/actions/update-images
 
-      - name: Commit and push changes
+      - name: Commit changes
         run: |
           git config --global user.email "${{ github.actor }}@users.noreply.github.com"
           git config --global user.name "${{ github.actor }}"
           git add .
           git commit -m "chore: update images"
-          git push
+
+      - name: Push changes
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.PUSH_PAT }}