diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 3fdc083..f53df30 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -16,8 +16,6 @@ jobs:
       - uses: DeterminateSystems/nix-installer-action@main
         with:
           determinate: true
-          extra-conf: |
-            sandbox = false
       - uses: DeterminateSystems/flakehub-cache-action@main
       - run: nix run nixpkgs#action-validator -- -v ./.github/workflows/workflow.yml
       - run: nix run nixpkgs#nodePackages.prettier -- --check .
diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml
index 981bcfb..ac0402c 100644
--- a/.github/workflows/workflow.yml
+++ b/.github/workflows/workflow.yml
@@ -111,6 +111,8 @@ jobs:
       - uses: DeterminateSystems/nix-installer-action@main
         with:
           determinate: true
+          extra-conf: |
+            sandbox = false
       - uses: DeterminateSystems/flakehub-cache-action@main
       - uses: webfactory/ssh-agent@v0.9.0
         if: ${{ inputs.enable-ssh-agent }}