diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 7119f50..e918742 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,20 +12,16 @@ jobs:
     permissions:
       # permissions required for nix caching to work properly
       id-token: write
-      contents: write
-    defaults:
-      run:
-        shell: devenv shell bash -- -e {0}
+      contents: read
     steps:
       - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@main
       - name: Install devenv.sh
         run: nix profile install nixpkgs#devenv
-        shell: bash -e {0}
       - name: Cache turbo build
         uses: dtinth/setup-github-actions-caching-for-turbo@v1
-      - run: pnpm install
-      - run: pnpm lint
-      - run: pnpm build
-      - run: pnpm test:unit
-      - run: pnpm test:e2e
+      - run: devenv shell pnpm install
+      - run: devenv shell pnpm lint
+      - run: devenv shell pnpm build
+      - run: devenv shell pnpm test:unit
+      - run: devenv shell pnpm test:e2e