diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index 5081253..edac147 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -38,16 +38,12 @@ jobs:
       - uses: cachix/install-nix-action@v23
         with:
           nix_path: nixpkgs=./nixpkgs.nix
+      - uses: tweag/configure-bazel-remote-cache-auth@v0
+        with:
+          buildbuddy_api_key: ${{ secrets.BUILDBUDDY_API_KEY }}
+          bazelrc_path: .bazelrc.local
       - name: Configure
-        env:
-          BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
         run: |
-          if [ -z "$BUILDBUDDY_API_KEY" ]; then
-              cache_setting='--noremote_upload_local_results'
-          else
-              cache_setting="--remote_header=x-buildbuddy-api-key=$BUILDBUDDY_API_KEY"
-          fi
-
           # Convert "ghc_X_Y_Z" to "X.Y.Z".
           GHC_VERSION="$(sed 's/^ghc_//;s/_/./g' <<<"${{ matrix.ghc-version }}")"
 
@@ -58,12 +54,11 @@ jobs:
             sed -i.bak 's/^GHC_VERSION = .*$/GHC_VERSION = "'"$GHC_VERSION"'"/g' example/MODULE.bazel
           fi
 
-          cat >.bazelrc.local <<EOF
+          cat >>.bazelrc.local <<EOF
           build --host_platform=@rules_nixpkgs_core//platforms:host
           build --bes_results_url=https://app.buildbuddy.io/invocation/
           build --bes_backend=grpcs://cloud.buildbuddy.io
           build --remote_cache=grpcs://cloud.buildbuddy.io
-          build $cache_setting
           build --remote_timeout=600
           build --keep_backend_build_event_connections_alive=false
           build --repository_cache=~/repo-cache/