diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index f5aa853..7de7b97 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -35,15 +35,15 @@ jobs:
         with:
           buildbuddy_api_key: ${{ secrets.BUILDBUDDY_API_KEY }}
           bazelrc_path: .bazelrc.auth
+      - uses: extractions/netrc@v1
+        with:
+          machine: api.github.com
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: Configure
         run: |
           cat >>.bazelrc.local <<EOF
           build --config=ci
           EOF
-          cat >~/.netrc <<EOF
-          machine api.github.com
-                  password ${{ secrets.GITHUB_TOKEN }}
-          EOF
           cat >.bazelrc.disable-stardoc <<-EOF
           	build --build_tag_filters=-stardoc_generation
           	test --test_tag_filters=-stardoc_generation