diff --git a/.github/workflows/cachix.yml b/.github/workflows/cachix.yml
index 9808c64..997a8bb 100644
--- a/.github/workflows/cachix.yml
+++ b/.github/workflows/cachix.yml
@@ -31,4 +31,4 @@ jobs:
         authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
         # FIXME: This is necessary since we used 'nix profile' before
         installCommand: "nix profile install --accept-flake-config nixpkgs#cachix"
-    - run: nix-fast-build --skip-cached --no-nom --flake ".#nixosConfigurations.matebook.config.system.build.toplevel"
+    - run: nix-fast-build --skip-cached --no-nom ./ci.nix
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index dc58569..5c7510c 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -31,7 +31,7 @@ jobs:
         id: build
         run: |
           nix flake update
-          nix-fast-build --skip-cached --no-nom --flake ".#nixosConfigurations.matebook.config.system.build.toplevel"
+          nix-fast-build --skip-cached --no-nom ./ci.nix
       - name: Commit flake.lock on success
         if: steps.build.outcome == 'success'
         uses: stefanzweifel/git-auto-commit-action@v5
diff --git a/ci.nix b/ci.nix
new file mode 100644
index 0000000..86d4793
--- /dev/null
+++ b/ci.nix
@@ -0,0 +1,6 @@
+let
+  outputs = builtins.getFlake (toString ./.);
+  pkgs = outputs.inputs.nixpkgs;
+  drvs = pkgs.lib.collect pkgs.lib.isDerivation outputs.nixosConfigurations.matebook.config.system.build.toplevel;
+in
+  drvs