diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
index 8776de0..d8c88d3 100644
--- a/.github/workflows/governance.yml
+++ b/.github/workflows/governance.yml
@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
\ No newline at end of file
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
index 9dde27a..3d5cd00 100644
--- a/.github/workflows/hypatia-scan.yml
+++ b/.github/workflows/hypatia-scan.yml
@@ -16,4 +16,4 @@ permissions:
 
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
\ No newline at end of file
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
diff --git a/journal-theme/.github/workflows/php-security.yml b/journal-theme/.github/workflows/php-security.yml
index 4beb9ba..0f57e1f 100644
--- a/journal-theme/.github/workflows/php-security.yml
+++ b/journal-theme/.github/workflows/php-security.yml
@@ -38,7 +38,6 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Install Nix
-        uses: cachix/install-nix-action@v31
         with:
           nix_path: nixpkgs=channel:nixos-unstable
       - name: Cache sanctify-php build
@@ -54,12 +53,8 @@ jobs:
           git clone --depth 1 https://github.com/hyperpolymath/sanctify-php.git /tmp/sanctify-php
           cd /tmp/sanctify-php
 
-          # Try nix build first, fall back to cabal
-          if nix build 2>/dev/null; then
             cp result/bin/sanctify ~/.local/bin/sanctify || true
           else
-            echo "Nix build unavailable, trying cabal..."
-            nix-shell -p ghc cabal-install --run "cabal update && cabal install --installdir=$HOME/.local/bin" || true
           fi
       - name: Run sanctify-php analysis
         run: "export PATH=\"$HOME/.local/bin:$PATH\"\nif command -v sanctify &>/dev/null; then\n  echo \"\U0001F50D Running sanctify-php analysis...\"\n  sanctify analyze . 2>&1 | tee sanctify-report.txt || true\n\n  # Check for critical issues\n  if grep -q '\\[High\\]' sanctify-report.txt; then\n    echo \"::error::High severity security issues found\"\n    cat sanctify-report.txt\n    exit 1\n  elif grep -q '\\[Medium\\]' sanctify-report.txt; then\n    echo \"::warning::Medium severity security issues found\"\n    cat sanctify-report.txt\n  fi\n\n  echo \"✅ sanctify-php analysis completed\"\nelse\n  echo \"⚠️ sanctify-php not available, skipping AST-based analysis\"\n  echo \"Install from: https://github.com/hyperpolymath/sanctify-php\"\nfi\n"