diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 7a84deb..18a43d0 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -13,7 +13,7 @@ jobs:
         with:
           extra-conf: |
             accept-flake-config = true
-      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
+      - uses: cachix/cachix-action@38b082610b782e7e93e209c35fd730d399dee866 # v17
         with:
           name: wi2trier
           authToken: ${{ secrets.CACHIX_TOKEN }}
diff --git a/.github/workflows/update.yaml b/.github/workflows/update.yaml
index 0deada1..a895292 100644
--- a/.github/workflows/update.yaml
+++ b/.github/workflows/update.yaml
@@ -16,7 +16,7 @@ jobs:
           extra-conf: |
             accept-flake-config = true
             commit-lock-file-summary = chore(deps): update flake.lock
-      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
+      - uses: cachix/cachix-action@38b082610b782e7e93e209c35fd730d399dee866 # v17
         with:
           name: wi2trier
           authToken: ${{ secrets.CACHIX_TOKEN }}