diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index 7c9439f..dd1cfca 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -39,7 +39,7 @@ jobs:
       # cachix-action is optional: without an authToken or if the cache
       # doesn't exist yet, continue-on-error lets the build proceed without
       # caching. Guard to the canonical repo so forks don't attempt uploads.
-      - uses: cachix/cachix-action@02b16339eddcf6ea27126a830c7f1992855cae13 # v17
+      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
         if: github.repository == 'LarsArtmann/segment-buffer'
         continue-on-error: true
         with:
@@ -57,7 +57,7 @@ jobs:
       - uses: cachix/install-nix-action@b4b293eae0b79aac8a161bb32925a5508c9cca93 # v31
         with:
           nix_path: nixpkgs=channel:nixos-unstable
-      - uses: cachix/cachix-action@02b16339eddcf6ea27126a830c7f1992855cae13 # v17
+      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
         if: github.repository == 'LarsArtmann/segment-buffer'
         continue-on-error: true
         with: