diff --git a/.github/workflows/rocq.yml b/.github/workflows/rocq.yml
index 4c6e5ab..6c130c8 100644
--- a/.github/workflows/rocq.yml
+++ b/.github/workflows/rocq.yml
@@ -80,7 +80,7 @@ jobs:
           df -h /
 
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@a7ad9c4f0c65208097f4d34f3cfa1913b80cce5c # pinned — supply-chain
+        uses: DeterminateSystems/nix-installer-action@33c9ab3ef95cd57c164d9d6eb1f9a46338538d41 # pinned — supply-chain
 
       - name: Set up Bazel
         uses: bazel-contrib/setup-bazel@0.14.0