split up gatekeeper commit as separate build action