diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 997e10b..4399553 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -33,6 +33,8 @@ jobs:
 
       - name: Install Nix
         uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
 
       - name: Set up Nix cache
         uses: DeterminateSystems/flakehub-cache-action@main
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 894e3f5..f08a31b 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -13,6 +13,8 @@ jobs:
       - uses: actions/checkout@v4
       - name: Install Nix
         uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
       - uses: DeterminateSystems/flakehub-cache-action@main
       - name: Check flake.lock
         uses: DeterminateSystems/flake-checker-action@main
@@ -32,6 +34,8 @@ jobs:
       - uses: actions/checkout@v4
       - name: Install Nix
         uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
       - uses: DeterminateSystems/flakehub-cache-action@main
       - name: cargo test
         run: nix develop -c cargo test
@@ -43,6 +47,8 @@ jobs:
       - uses: actions/checkout@v4
       - name: Install Nix
         uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
       - uses: DeterminateSystems/flakehub-cache-action@main
       - name: Check flake.lock
         run: |
@@ -58,6 +64,8 @@ jobs:
       - uses: actions/checkout@v4
       - name: Install Nix
         uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
       - uses: DeterminateSystems/flakehub-cache-action@main
       - name: Check flake.lock
         run: |
@@ -70,6 +78,8 @@ jobs:
       - uses: actions/checkout@v4
       - name: Install Nix
         uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
       - uses: DeterminateSystems/flakehub-cache-action@main
       - name: Check flake.lock
         run: |
diff --git a/.github/workflows/flakehub-publish-tagged.yaml b/.github/workflows/flakehub-publish-tagged.yaml
index 17c22b1..9f2573f 100644
--- a/.github/workflows/flakehub-publish-tagged.yaml
+++ b/.github/workflows/flakehub-publish-tagged.yaml
@@ -22,6 +22,8 @@ jobs:
         with:
           ref: "${{ (inputs.tag != null) && format('refs/tags/{0}', inputs.tag) || '' }}"
       - uses: "DeterminateSystems/nix-installer-action@main"
+        with:
+          determinate: true
       - uses: "DeterminateSystems/flakehub-push@main"
         with:
           visibility: "public"
diff --git a/.github/workflows/ref-statuses.yaml b/.github/workflows/ref-statuses.yaml
index eaad4da..95657b8 100644
--- a/.github/workflows/ref-statuses.yaml
+++ b/.github/workflows/ref-statuses.yaml
@@ -11,6 +11,8 @@ jobs:
       - uses: actions/checkout@v4
 
       - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
 
       - uses: DeterminateSystems/flakehub-cache-action@main
 
diff --git a/.github/workflows/update-flake-lock.yaml b/.github/workflows/update-flake-lock.yaml
index 13962bf..dfd8d15 100644
--- a/.github/workflows/update-flake-lock.yaml
+++ b/.github/workflows/update-flake-lock.yaml
@@ -11,6 +11,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
       - uses: DeterminateSystems/flakehub-cache-action@main
       - uses: DeterminateSystems/update-flake-lock@main
         with: