diff --git a/MODULE.bazel b/MODULE.bazel
index f2c41153f..de556a24d 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -2,3 +2,4 @@ module(name = "constellation")
 
 bazel_dep(name = "bazel_skylib", version = "1.6.1")
 bazel_dep(name = "hermetic_cc_toolchain", version = "3.1.0")
+bazel_dep(name = "rules_cc", version = "0.0.9")
diff --git a/WORKSPACE.bzlmod b/WORKSPACE.bzlmod
index 295af761c..0d1ddde26 100644
--- a/WORKSPACE.bzlmod
+++ b/WORKSPACE.bzlmod
@@ -1,14 +1,5 @@
 workspace(name = "constellation")
 
-# Sadly, some Bazel rules we depend on have no support for bzlmod yet
-# Here is an (incomplete) list of rules known to not support bzlmod.
-# Please extend this list as you find more.
-# - rules_nixpkgs: https://github.com/tweag/rules_nixpkgs/issues/181
-
-load("//bazel/toolchains:cc_deps.bzl", "rules_cc_deps")
-
-rules_cc_deps()
-
 # nixpkgs deps
 load("//bazel/toolchains:nixpkgs_deps.bzl", "nixpkgs_deps")
 
diff --git a/bazel/toolchains/cc_deps.bzl b/bazel/toolchains/cc_deps.bzl
deleted file mode 100644
index cdda9821c..000000000
--- a/bazel/toolchains/cc_deps.bzl
+++ /dev/null
@@ -1,15 +0,0 @@
-"""bazel rules_cc"""
-
-load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
-
-def rules_cc_deps():
-    http_archive(
-        name = "rules_cc",
-        urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/2037875b9a4456dce4a79d112a8ae885bbc4aad968e6587dca6e64f3a0900cdf",
-            "https://github.com/bazelbuild/rules_cc/releases/download/0.0.9/rules_cc-0.0.9.tar.gz",
-        ],
-        sha256 = "2037875b9a4456dce4a79d112a8ae885bbc4aad968e6587dca6e64f3a0900cdf",
-        strip_prefix = "rules_cc-0.0.9",
-        type = "tar.gz",
-    )