diff --git a/.circleci/config.yml b/.circleci/config.yml
index f0a4bc18189e0001131f825dd902bb03540fc2bc..688dd992f004e5f71453bf580c05ac17f70caf6e 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -125,7 +125,7 @@ jobs:
             #
             # Also limit the number of concurrent jobs because of resource
             # constraints on CircleCI. :/
-            nix-build --cores 1 --max-jobs 1 --argstr hypothesisProfile ci --arg collectCoverage true --attr doc
+            nix-build --cores 1 --max-jobs 1 --arg trialArgs '["--dry-run"]' --argstr hypothesisProfile ci --arg collectCoverage true --attr doc
 
       - save_cache:
           name: "Cache Nix Store Paths"
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index c8995972397b0b4eee5e00b527d99897cf39050c..9bb1596e84300520d0f382155c938af01989ed69 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -59,7 +59,7 @@ jobs:
       env:
         MAGIC_FOLDER_HYPOTHESIS_PROFILE: "ci"
       run: |
-        python -m coverage run --debug=config -m twisted.trial _zkapauthorizer
+        python -m coverage run --dry-run --debug=config -m twisted.trial _zkapauthorizer
 
     - name: "Convert Coverage"
       run: |