diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index cd3103c..899d1bc 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -33,6 +33,8 @@ jobs:
           df -h
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          ref: "${{github.head_ref || github.ref_name}}"
       - name: Install Nix
         uses: cachix/install-nix-action@v23
         with:
@@ -49,15 +51,15 @@ jobs:
           echo "${{secrets.NIX_SIGNING_KEY}}" > hydra_key
           nix develop \
           --ignore-environment \
-          --keep CI \
           --keep AWS_ACCESS_KEY_ID \
           --keep AWS_SECRET_ACCESS_KEY \
-          --keep S3_ENDPOINT \
+          --keep CI \
           --keep LOG_LEVEL \
+          --keep S3_ENDPOINT \
           --command just ci
         env:
           AWS_ACCESS_KEY_ID: "${{secrets.AWS_ACCESS_KEY_ID}}"
           AWS_SECRET_ACCESS_KEY: "${{secrets.AWS_SECRET_ACCESS_KEY}}"
-          S3_ENDPOINT: "${{secrets.S3_ENDPOINT}}"
-          NIX_SIGNING_KEY_FILE: "/home/runner/work/capkgs/capkgs/hydra_key"
           LOG_LEVEL: "debug"
+          NIX_SIGNING_KEY_FILE: "/home/runner/work/capkgs/capkgs/hydra_key"
+          S3_ENDPOINT: "${{secrets.S3_ENDPOINT}}"