diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
index 94f51e620..ce48aa395 100644
--- a/.github/workflows/push.yaml
+++ b/.github/workflows/push.yaml
@@ -10,7 +10,6 @@ jobs:
     name: Check source
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
       - uses: cachix/install-nix-action@v22
         with:
           nix_path: nixpkgs=channel:nixos-unstable
@@ -18,13 +17,13 @@ jobs:
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - uses: actions/checkout@v3
       - name: Check source
         run: make check-source
   check-dependencies:
     name: Check dependencies
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
       - uses: cachix/install-nix-action@v22
         with:
           nix_path: nixpkgs=channel:nixos-unstable
@@ -32,6 +31,7 @@ jobs:
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - uses: actions/checkout@v3
       - name: Check dependencies
         run: make check-dependencies
   run-sel4test:
@@ -42,7 +42,6 @@ jobs:
       matrix:
         arch: [aarch64, aarch32, riscv64, riscv32, x86_64, ia32]
     steps:
-      - uses: actions/checkout@v3
       - uses: cachix/install-nix-action@v22
         with:
           nix_path: nixpkgs=channel:nixos-unstable
@@ -50,6 +49,7 @@ jobs:
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - uses: actions/checkout@v3
       - name: Build and check
         run: make run-sel4test-for SEL4TEST_ARCH=${{ matrix.arch }}
   run-other-tests:
@@ -68,7 +68,6 @@ jobs:
           remove-haskell: 'true'
           remove-codeql: 'true'
           remove-docker-images: 'true'
-      - uses: actions/checkout@v3
       - uses: cachix/install-nix-action@v22
         with:
           nix_path: nixpkgs=channel:nixos-unstable
@@ -76,13 +75,13 @@ jobs:
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - uses: actions/checkout@v3
       - name: Run tests
         run: make run-fast-tests
   build-docs:
     name: Build docs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
       - uses: cachix/install-nix-action@v22
         with:
           nix_path: nixpkgs=channel:nixos-unstable
@@ -90,6 +89,7 @@ jobs:
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - uses: actions/checkout@v3
       - name: Build docs
         run: make html-links
   build-everything:
@@ -109,7 +109,6 @@ jobs:
           remove-haskell: 'true'
           remove-codeql: 'true'
           remove-docker-images: 'true'
-      - uses: actions/checkout@v3
       - uses: cachix/install-nix-action@v22
         with:
           nix_path: nixpkgs=channel:nixos-unstable
@@ -117,6 +116,7 @@ jobs:
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - uses: actions/checkout@v3
       - name: Build everything
         run: make everything
       - name: Expose docs