diff --git a/.github/workflows/build_nix.yml b/.github/workflows/build_nix.yml
index 7ef5036..2f684e1 100644
--- a/.github/workflows/build_nix.yml
+++ b/.github/workflows/build_nix.yml
@@ -10,4 +10,4 @@ jobs:
       - uses: actions/checkout@v2
       - uses: cachix/install-nix-action@v12
       - name: Building package
-        run: sudo apt install -y pkg-config && nix-build . -A defaultPackage.x86_64-linux
+        run: nix-build . -A defaultPackage.x86_64-linux
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 63e1cfd..94d243b 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -40,8 +40,6 @@ jobs:
       - name: Install cosign
         if: github.event_name != 'pull_request'
         uses: sigstore/cosign-installer@7e0881f8fe90b25e305bbf0309761e9314607e25
-        with:
-          cosign-release: 'v1.9.0'
 
 
       # Workaround: https://github.com/docker/build-push-action/issues/461
diff --git a/default.nix b/default.nix
index 39bacff..de51dae 100644
--- a/default.nix
+++ b/default.nix
@@ -1,7 +1,11 @@
-(import (
+{pkgs}: (import (
   fetchTarball {
     url = "https://github.com/edolstra/flake-compat/archive/99f1c2157fba4bfe6211a321fd0ee43199025dbf.tar.gz";
     sha256 = "0x2jn3vrawwv9xp15674wjz9pixwjyj3j771izayl962zziivbx2"; }
 ) {
   src =  ./.;
+  buildInputs = with pkgs;[
+    pkg-config
+    openssl
+  ];
 }).defaultNix