diff --git a/devShell.nix b/devShell.nix
index 08405cb8..316eb985 100644
--- a/devShell.nix
+++ b/devShell.nix
@@ -26,6 +26,10 @@ let
     done
     cd $START_DIR
   '';
+  nf-update = pkgs.writeShellScriptBin "nf-update" ''
+    nix flake update
+    nix flake lock ./trusted --update-input trusted
+  '';
 in
 with lib; pkgs.mkShell {
   nativeBuildInputs = with pkgs; [