The idea is: fetch origin/master but don't merge it into local master, branch off into auto-blacklist-blah from deploy, make commit, apply that commit onto origin/master's history and update the ref, push
No need to assume a fast forward and no checking out master
What you are doing is going to be removed soon anyway. Once the serverless stuff is up and running. I have the blacklists available. I have adding to them available. Things left to do: 1.) Security around the add/delete ones 2.) Actual changes in smokey so that it uses this instead of Git.
3.) Figuring out what it lives in the cloud. Either it moves to another acct, or it stays under mine. Discussion for later though. 4.) Automated deployment
This will remove a vast majority of our git issues though, because smokey will instead issue an HTTP request - either a GET to pull the most recent blacklist or a POST to update