diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ab563d8d..2a3ee57e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -429,10 +429,10 @@ jobs:
         run: |
              echo "before anything..."
              "${PYTHON}" -m pip list
-             "${PYTHON}" -m pip install --upgrade -r requirements.txt
-             echo "after requirements..."
-             "${PYTHON}" -m pip list
              if [[ "${RUNNER_OS}" == "macOS" ]]; then
+               "${PYTHON}" -m pip install --upgrade --no-binary :all: -r requirements.txt
+               echo "after requirements..."
+               "${PYTHON}" -m pip list
                # cffi is a dep of cryptography and doesn't ship
                # a universal2 wheel so we must build one ourself :-/
                export CFLAGS="-arch x86_64 -arch arm64"
@@ -453,6 +453,9 @@ jobs:
                                              cryptography
                "${PYTHON}" -m pip install --force-reinstall --no-deps cryptography*.whl
              else
+               "${PYTHON}" -m pip install --upgrade -r requirements.txt
+               echo "after requirements..."
+               "${PYTHON}" -m pip list
                "${PYTHON}" -m pip install --force-reinstall --no-deps --upgrade cryptography
              fi
              echo "after cryptography..."