diff --git a/.forgejo/workflows/cache.yaml b/.forgejo/workflows/cache.yaml
index 25a7875f..976f57b1 100644
--- a/.forgejo/workflows/cache.yaml
+++ b/.forgejo/workflows/cache.yaml
@@ -12,7 +12,9 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - run: attic login fediversity https://attic.fediversity.net ${{ secrets.ATTIC_PUSH_KEY }} && attic use demo
+
+      - name: Configure cache
+        run: nix-shell --run "attic login fediversity https://attic.fediversity.net ${{ secrets.ATTIC_PUSH_KEY }} && attic use demo"
 
       - name: Set up SSH key to access age secrets
         run: |
@@ -22,4 +24,4 @@ jobs:
           chmod 600 ~/.ssh/id_ed25519
 
       - name: Cache
-        run: attic push demo $(nix-build)
+        run: nix-shell --run "attic push demo $(nix-build)"
diff --git a/.forgejo/workflows/ci.yaml b/.forgejo/workflows/ci.yaml
index 2557f1d1..0f23e498 100644
--- a/.forgejo/workflows/ci.yaml
+++ b/.forgejo/workflows/ci.yaml
@@ -21,7 +21,8 @@ jobs:
       - uses: actions/checkout@v4
       - run: nix-shell --run 'nix-unit ./deployment/data-model-test.nix'
 
-      - run: attic login fediversity https://attic.fediversity.net ${{ secrets.ATTIC_PUSH_KEY }} && attic use demo
+      - name: Configure cache
+        run: nix-shell --run "attic login fediversity https://attic.fediversity.net ${{ secrets.ATTIC_PUSH_KEY }} && attic use demo"
 
       - name: Set up SSH key to access age secrets
         run: |
@@ -31,7 +32,7 @@ jobs:
           chmod 600 ~/.ssh/id_ed25519
 
       - name: Cache
-        run: attic push demo $(nix-build)
+        run: nix-shell --run "attic push demo $(nix-build)"
 
   check-mastodon:
     runs-on: native