diff --git a/.forgejo/workflows/test.yml b/.forgejo/workflows/test.yml
index 8a5d454..d964915 100644
--- a/.forgejo/workflows/test.yml
+++ b/.forgejo/workflows/test.yml
@@ -17,8 +17,8 @@ jobs:
       - uses: cachix/install-nix-action@v31
         with:
           extra_nix_config: | # https://github.com/NixOS/nix/issues/11295 
-            sandbox = false
-      - run: nix --option sandbox false profile install nixpkgs#devenv
+            sandbox = true
+      - run: nix --option sandbox true profile install nixpkgs#devenv
       - uses: rharkor/caching-for-turbo@v1.8
       - name: Run tests
         run: |
@@ -26,21 +26,21 @@ jobs:
           export HOME=$(mktemp -d)
 
           # https://github.com/NixOS/nix/issues/670#issuecomment-304524165
-          export NIX_STORE_DIR=/nix/store # binary cache 'https://cache.nixos.org' is for Nix stores with prefix '/nix/store'
+          export NIX_STORE_DIR=$HOME/nix/store # binary cache 'https://cache.nixos.org' is for Nix stores with prefix '/nix/store'
           export NIX_STATE_DIR=$HOME/nix/var/nix
           export NIX_LOG_DIR=$HOME/nix/var/log/nix
 
                   echo pnpm install
-          devenv shell pnpm install
+          devenv shell --nix-option sandbox true pnpm install
 
                   echo pnpm lint
-          devenv shell pnpm lint
+          devenv shell --nix-option sandbox true pnpm lint
 
                   echo pnpm build
-          devenv shell pnpm build
+          devenv shell --nix-option sandbox true pnpm build
 
                   echo pnpm test:unit
-          devenv shell pnpm test:unit
+          devenv shell --nix-option sandbox true pnpm test:unit
 
                   echo pnpm test:e2e
-          devenv shell pnpm test:e2e
+          devenv shell --nix-option sandbox true pnpm test:e2e