cachix docs suggest splitting this up so why not

.gitlab-ci.yml

@@ -41,14 +41,20 @@ morph-builds:
     # thanks to project-level configuration.
     CACHIX_NAME: "privatestorage-opensource"
 
-  script:
+  before_script:
     - |
       nix-env -iA nixpkgs.cachix nixpkgs.bash
       cachix use privatestorage-opensource
       nix path-info --all > /tmp/store-path-pre-build
+
+  script:
+    - |
       for grid in morph/grid/*/grid.nix; do
           morph build "${grid}"
       done
+
+  after_script:
+    - |
       bash -c "comm -13 <(sort /tmp/store-path-pre-build | grep -v '\.drv$') <(nix path-info --all | grep -v '\.drv$' | sort) | cachix push $CACHIX_NAME"
 
 vulnerability-scan: