diff --git a/Dockerfile b/Dockerfile
index b15b60c..dd52a2a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -24,7 +24,8 @@ ARG TALHELPER_VERSION
 ARG SOPS_VERSION
 
 RUN set -eux; \
-    apk add --no-cache curl ca-certificates-bundle
+    apk add --no-cache curl ca-certificates-bundle; \
+    update-ca-certificates
 
 # Map Docker TARGETARCH to upstream asset architecture naming where needed.
 ARG TARGETARCH
@@ -111,6 +112,7 @@ LABEL org.opencontainers.image.url.sops="https://github.com/getsops/sops"
 
 RUN set -eux; \
     apk add --no-cache ca-certificates-bundle bash git openssh-client; \
+    update-ca-certificates; \
     mkdir -p /usr/local/share/checksums
 
 COPY --from=downloader /tmp/talosctl /usr/local/bin/talosctl