diff --git a/flake.lock b/flake.lock
index 9f3a31e..25a5d28 100644
--- a/flake.lock
+++ b/flake.lock
@@ -732,7 +732,7 @@
     "secret": {
       "flake": false,
       "locked": {
-        "lastModified": 1686920512,
+        "lastModified": 1687113829,
         "narHash": "sha256-FUZSDRLVdz6margPVrtoKUg63BdxfRNENeUUOxTiIS4=",
         "path": "/home/main/dotfiles2/secret",
         "type": "path"
diff --git a/flake.nix b/flake.nix
index 1c4d1db..3742554 100644
--- a/flake.nix
+++ b/flake.nix
@@ -174,6 +174,9 @@
 
           devShells.default = pkgs.mkShell {
             nativeBuildInputs = with pkgs; [
+              (pkgs.writeShellScriptBin "update-secret" ''
+                nix flake lock --update-input secret
+              '')
               nil
             ];
           };