diff --git a/lib/update_security_release.js b/lib/update_security_release.js
index 7011f11b..91ec0715 100644
--- a/lib/update_security_release.js
+++ b/lib/update_security_release.js
@@ -46,6 +46,10 @@ export default class UpdateSecurityRelease extends SecurityRelease {
     }
     const vulnerabilitiesJSONPath = this.getVulnerabilitiesJSONPath();
     fs.writeFileSync(vulnerabilitiesJSONPath, JSON.stringify(content, null, 2));
+
+    const commitMessage = 'chore: git node security --sync';
+    commitAndPushVulnerabilitiesJSON([vulnerabilitiesJSONPath],
+      commitMessage, { cli: this.cli, repository: this.repository });
     this.cli.ok('Synced vulnerabilities.json with HackerOne');
   }