diff --git a/hack/populate_secrets.sh b/hack/populate_secrets.sh
index 6754871dca..5094cb137b 100755
--- a/hack/populate_secrets.sh
+++ b/hack/populate_secrets.sh
@@ -1,4 +1,5 @@
-#!/usr/bin/env bash
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash
 
 set -euo pipefail