diff --git a/.github/workflows/slsa-publish.yml b/.github/workflows/slsa-publish.yml
index 35daf7c..0ba60fa 100644
--- a/.github/workflows/slsa-publish.yml
+++ b/.github/workflows/slsa-publish.yml
@@ -12,9 +12,10 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
+      - name: install devbox  
+        uses: jetpack-io/devbox-install-action@v0.2.0
       - name: build artifacts
         run: |
-            curl -fsSL https://get.jetpack.io/devbox | bash -f
             devbox run poetry install
             devbox run poetry build
       - name: hash artifacts