diff --git a/.github/workflows/roles-readme.yml b/.github/workflows/roles-readme.yml
index 4651b1d6..6e4c8ee8 100644
--- a/.github/workflows/roles-readme.yml
+++ b/.github/workflows/roles-readme.yml
@@ -37,11 +37,16 @@ jobs:
       - name: Run aar_doc
         run: aar_doc roles/${{ matrix.roles }} markdown
 
+      - name: Output diff
+        run: git diff roles/${{ matrix.roles }}/README.md
+
       - name: Push README
+        if: github.event_name != 'pull_request'
         uses: github-actions-x/commit@v2.9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
-          push-branch: ${{ github.head_ref ?? github.ref_name }}
           commit-message: 'update ${{ matrix.roles }} readme'
           files: roles/${{ matrix.roles }}/README.md
           rebase: true
+          name: dev-sec CI
+          email: hello@dev-sec.io
diff --git a/roles/ssh_hardening/meta/argument_specs.yml b/roles/ssh_hardening/meta/argument_specs.yml
index 44b39891..d8017d02 100644
--- a/roles/ssh_hardening/meta/argument_specs.yml
+++ b/roles/ssh_hardening/meta/argument_specs.yml
@@ -65,7 +65,7 @@ argument_specs:
       ssh_permit_tunnel:
         default: false
         type: bool
-        description: '`true` if SSH Port Tunneling is required.'
+        description: Set to `true` if SSH Port Tunneling is required.
       ssh_remote_hosts:
         default: []
         type: list