diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index ca5e199..997c77f 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -17,4 +17,4 @@ jobs:
       - run: |
           mkdir -p ~/.config/sops/age
           echo -n "${{ secrets.AGE_SECRET_KEY }}" > ~/.config/sops/age/keys.txt
-      - run: nix run nixpkgs#sops --decrypt src/secrets/sops.yaml | grep "paperless-ngx:"
+      - run: nix run nixpkgs#sops -- --decrypt src/secrets/sops.yaml | grep "paperless-ngx:"