diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 5ee698d0..1c5a2162 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -7,6 +7,7 @@ on:
 
 env:
   RUSTFLAGS: -Dwarnings -Dclippy::all -Dclippy::pedantic
+  CARGO_HACK_ARGS: --feature-powerset --exclude-features default --group-features base64,serde,arbitrary,hex
 
 jobs:
 
@@ -62,10 +63,6 @@ jobs:
       with:
         name: cargo-hack
         version: 0.5.16
-    - if: "github.ref_protected"
-      run: echo 'CARGO_HACK_ARGS=--feature-powerset' >> $GITHUB_ENV
-    - if: "!github.ref_protected"
-      run: echo 'CARGO_HACK_ARGS=--feature-powerset --exclude-features default --group-features base64,serde,arbitrary' >> $GITHUB_ENV
     - run: cargo hack clippy $CARGO_HACK_ARGS --target ${{ matrix.sys.target }} --all-targets
 
   test:
@@ -90,10 +87,6 @@ jobs:
       with:
         name: cargo-hack
         version: 0.5.16
-    - if: "github.ref_protected"
-      run: echo 'CARGO_HACK_ARGS=--feature-powerset' >> $GITHUB_ENV
-    - if: "!github.ref_protected"
-      run: echo 'CARGO_HACK_ARGS=--feature-powerset --exclude-features default --group-features base64,serde,arbitrary' >> $GITHUB_ENV
     - run: cargo hack test $CARGO_HACK_ARGS
 
   publish-dry-run:
@@ -109,3 +102,4 @@ jobs:
     with:
       runs-on: ${{ matrix.sys.os }}
       target: ${{ matrix.sys.target }}
+      cargo-hack-feature-options: --feature-powerset --exclude-features default --group-features base64,serde,arbitrary,hex