diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index cfa430e3..f9d798ff 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -42,10 +42,9 @@ jobs:
       with:
         install_url: ${{ matrix.install_url }}
     - uses: cachix/cachix-action@v12
-      if: github.ref == 'refs/heads/master'
       with:
         name: crane
-        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+        authToken: ${{ github.ref == 'refs/heads/master' && secrets.CACHIX_AUTH_TOKEN }}
     - name: flake checks
       run: nix flake check --accept-flake-config --keep-going --print-build-logs ${{ matrix.nixpkgs-override }}
     - name: extra tests
@@ -77,10 +76,9 @@ jobs:
         install_url: ${{ matrix.install_url }}
     - uses: DeterminateSystems/magic-nix-cache-action@main
     - uses: cachix/cachix-action@v12
-      if: github.ref == 'refs/heads/master'
       with:
         name: crane
-        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+        authToken: ${{ github.ref == 'refs/heads/master' && secrets.CACHIX_AUTH_TOKEN }}
     - name: validate examples
       run: |
         for f in $(find examples -maxdepth 1 -mindepth 1 -type d ${{ matrix.filter }}); do