diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 844dddf..967f86d 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,21 +12,22 @@ jobs:
     permissions:
       # permissions required for nix caching to work properly
       id-token: write
-      contents: read
+      contents: write
+    defaults:
+      run:
+        shell: devenv shell bash -- -e {0}
     steps:
       - uses: actions/checkout@v4
-      - uses: cachix/install-nix-action@v26
-      - uses: cachix/cachix-action@v14
-        with:
-          name: devenv
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/flakehub-cache-action@main
+      - uses: DeterminateSystems/flake-checker-action@main
       - name: Install devenv.sh
         run: nix profile install nixpkgs#devenv
+        shell: bash -e {0}
       - name: Cache turbo build
         uses: dtinth/setup-github-actions-caching-for-turbo@v1
-      - shell: devenv shell bash -- -e {0}
-        run: |
-          pnpm install
-          pnpm lint
-          pnpm build
-          pnpm test:unit
-          pnpm test:e2e
+      - run: pnpm install
+      - run: pnpm lint
+      - run: pnpm build
+      - run: pnpm test:unit
+      - run: pnpm test:e2e
diff --git a/.vscode/settings.json b/.vscode/settings.json
index 0f155d4..e0f6193 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -10,6 +10,7 @@
         "dompurify",
         "dtinth",
         "elasticlunr",
+        "flakehub",
         "fnref",
         "Fontawesome",
         "Fonticons",