diff --git a/nixos/tests/dep-scan.nix b/nixos/tests/dep-scan.nix
index ffb43d85367f..8d7bdde8578e 100644
--- a/nixos/tests/dep-scan.nix
+++ b/nixos/tests/dep-scan.nix
@@ -22,12 +22,7 @@
 
     # code repo to scan for vulnerabilites, could be anything
     # I just happened to pick the source of the package
-    environment.etc."dep-scan-source".source = pkgs.fetchFromGitHub {
-      owner = "owasp-dep-scan";
-      repo = "dep-scan";
-      tag = "v6.0.0b3";
-      hash = "sha256-GdrFsECcBZ2J47ojM33flqOtrY3avchGpsZk6pt8Aks=";
-    };
+    environment.etc."dep-scan-source".source = pkgs.dep-scan.src;
 
     # we need to download the database before the vm starts, otherwise
     # the program will try to download them at runtime.