diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index ff70e3f..3be0821 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -7,17 +7,18 @@ on:
       - main
 
 jobs:
-  # Mac tests and Ubuntu tests are separated so that Ubuntu tests can
-  # run on both PRs and main; and Mac tests only on main branch.
   ubuntu_tests:
     runs-on: ubuntu-latest
+    permissions:
+      actions: write
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
 
       - uses: cachix/install-nix-action@v26
-      - uses: cachix/cachix-action@v14
-        with:
-          name: devenv
+
+      - uses: DeterminateSystems/magic-nix-cache-action@main
 
       - name: Install devenv.sh
         run: nix profile install nixpkgs#devenv
@@ -42,9 +43,7 @@ jobs:
           curl -s --unix-socket $HOME/.colima/default/docker.sock http/_ping
 
       - uses: cachix/install-nix-action@v26
-      - uses: cachix/cachix-action@v14
-        with:
-          name: devenv
+      - uses: DeterminateSystems/magic-nix-cache-action@main
 
       - name: Install devenv.sh
         run: nix profile install nixpkgs#devenv