diff --git a/pkgs/by-name/az/azure-artifacts-credprovider/package.nix b/pkgs/by-name/az/azure-artifacts-credprovider/package.nix
index fa7bf76cc32f..67f5f79101fa 100644
--- a/pkgs/by-name/az/azure-artifacts-credprovider/package.nix
+++ b/pkgs/by-name/az/azure-artifacts-credprovider/package.nix
@@ -3,6 +3,7 @@
   buildDotnetModule,
   dotnetCorePackages,
   fetchFromGitHub,
+  nix-update-script,
 }:
 buildDotnetModule rec {
   dotnet-sdk = dotnetCorePackages.sdk_8_0;
@@ -18,7 +19,7 @@ buildDotnetModule rec {
   projectFile = "CredentialProvider.Microsoft/CredentialProvider.Microsoft.csproj";
   testProjectFile = "CredentialProvider.Microsoft.Tests/CredentialProvider.Microsoft.Tests.csproj";
   nugetDeps = ./deps.json;
-  passthru.updateScript = ./update.sh;
+  passthru.updateScript = nix-update-script { };
   patchPhase = ''
     sed -i 's|<TargetFrameworks>.*</TargetFrameworks>|<TargetFramework>net8.0</TargetFramework>|' Build.props
   '';
diff --git a/pkgs/by-name/az/azure-artifacts-credprovider/update.sh b/pkgs/by-name/az/azure-artifacts-credprovider/update.sh
deleted file mode 100755
index 591c97e51cc0..000000000000
--- a/pkgs/by-name/az/azure-artifacts-credprovider/update.sh
+++ /dev/null
@@ -1,35 +0,0 @@
-#!/usr/bin/env nix-shell
-#!nix-shell -i bash -p curl gnused gawk nix-prefetch jq dotnet-sdk_8 nuget-to-nix
-
-set -euo pipefail
-URL="https://github.com/microsoft/artifacts-credprovider"
-
-ROOT="$(dirname "$(readlink -f "$0")")"
-NIX_DRV="$ROOT/package.nix"
-if [ ! -f "$NIX_DRV" ]; then
-  echo "ERROR: cannot find package.nix in $ROOT"
-  exit 1
-fi
-
-TMP="$(mktemp -d)"
-clean_up() {
-    rm -rf "$TMP"
-}
-trap clean_up EXIT SIGINT SIGTERM
-PACKAGES="$TMP/packages"
-SRC_RW="$TMP/src"
-
-mkdir -p $SRC_RW
-mkdir -p $PACKAGES
-
-
-VER=$(curl -s "https://api.github.com/repos/microsoft/artifacts-credprovider/releases/latest" | jq -r .tag_name | grep -oP '\d+\.\d+\.\d+' )
-HASH=$(nix-hash --to-sri --type sha256 "$(nix-prefetch-git --url $URL --rev "v$VER" --quiet | jq -r .sha256)")
-
-sed -i "s/version = \".*\"/version = \"$VER\"/" "$NIX_DRV"
-sed -i "s#sha256 = \"sha256-.\{44\}\"#sha256 = \"$HASH\"#" "$NIX_DRV"
-
-nix-prefetch-git --url $URL --rev "v$VER" --out $SRC_RW --builder --quiet
-rm $SRC_RW/nuget.config
-dotnet restore "$SRC_RW/MicrosoftCredentialProvider.sln" --packages $PACKAGES -r:linux-x64
-nuget-to-nix $PACKAGES > deps.nix