diff --git a/stdlib/git/commit.cue b/stdlib/git/commit.cue
new file mode 100644
index 00000000..37c82cb0
--- /dev/null
+++ b/stdlib/git/commit.cue
@@ -0,0 +1,89 @@
+package git
+
+import (
+	"alpha.dagger.io/dagger"
+	"alpha.dagger.io/os"
+)
+
+// Commit & push to github repository
+#Commit: {
+	// Git repository
+	repository: {
+		// Repository source code
+		source: dagger.#Artifact
+
+		// Repository remote URL (e.g https://github.com/dagger/dagger.git)
+		remote: dagger.#Input & {string}
+
+		// Github PAT
+		PAT: dagger.#Input & {*null | dagger.#Secret}
+
+		// Git branch
+		branch: dagger.#Input & {string}
+	}
+
+	// Username
+	name: dagger.#Input & {string}
+
+	// Email
+	email: dagger.#Input & {string}
+
+	// Commit message
+	message: dagger.#Input & {string}
+
+	// Content to commit
+	content: dagger.#Artifact
+
+	// Force push options
+	force: dagger.#Input & {*false | bool}
+
+	ctr: os.#Container & {
+		image: #Image
+		command: #"""
+				# Move changes into repository
+				mv /input/content/* .
+
+				# Commit changes
+				git add .
+				git -c user.name="$USER_NAME" -c user.email="$USER_EMAIL" commit -m "$COMMIT_MESSAGE"
+
+				# Push
+				git push "$OPT_FORCE" -u "$GIT_REMOTE" HEAD:refs/heads/"$GIT_BRANCH"
+
+				# Retrieve commit hash
+				git rev-parse --verify HEAD | tr -d '\n' > /commit.txt
+			"""#
+		dir: "/input/repo"
+		mount: {
+			"/input/repo": from:    repository.source
+			"/input/content": from: content
+		}
+		env: {
+			"USER_NAME":      name
+			"USER_EMAIL":     email
+			"COMMIT_MESSAGE": message
+			"GIT_BRANCH":     repository.branch
+			"GIT_REMOTE":     repository.remote
+			if force {
+				"OPT_FORCE": "-f"
+			}
+
+		}
+		if repository.PAT != null {
+			env: "GIT_ASKPASS": "/get_gitPAT"
+			files: "/get_gitPAT": {
+				content: "cat /secret/github_pat"
+				mode:    0o500
+			}
+			secret: "/secret/github_pat": repository.PAT
+		}
+	}
+
+	// Commit hash
+	hash: {
+		os.#File & {
+			from: ctr
+			path: "/commit.txt"
+		}
+	}.contents & dagger.#Output
+}
diff --git a/stdlib/git/image.cue b/stdlib/git/image.cue
new file mode 100644
index 00000000..a3a0a262
--- /dev/null
+++ b/stdlib/git/image.cue
@@ -0,0 +1,11 @@
+package git
+
+import (
+	"alpha.dagger.io/alpine"
+)
+
+#Image: alpine.#Image & {
+	package: {
+		git: true
+	}
+}
diff --git a/stdlib/os/container.cue b/stdlib/os/container.cue
index 4e537205..92120e80 100644
--- a/stdlib/os/container.cue
+++ b/stdlib/os/container.cue
@@ -54,6 +54,12 @@ import (
 	// Safely mount secrets (in cleartext) as non-persistent files
 	secret: [string]: dagger.#Secret
 
+	// Write file in the container
+	files: [string]: {
+		content: string
+		mode:    int | *0o644
+	}
+
 	// Mount persistent cache directories
 	cache: [string]: true
 
@@ -86,6 +92,13 @@ import (
 				"dir": dir
 			}
 		},
+		for dest, file in files {
+			op.#WriteFile & {
+				"content": file.content
+				"mode":    file.mode
+				"dest":    dest
+			}
+		},
 		// Execute main command with volumes
 		if command != "" {
 			op.#Exec & {