diff --git a/.woodpecker/db.yml b/.woodpecker/db.yml
index 7620129..f5cb2d5 100644
--- a/.woodpecker/db.yml
+++ b/.woodpecker/db.yml
@@ -20,7 +20,7 @@ steps:
       VAULT_ROLE_ID:     { from_secret: VAULT_APP_ROLE }
       VAULT_SECRET_ID:   { from_secret: VAULT_SECRET_ID }
     commands:
-      - apk add --no-cache curl bash coreutils sed python3
+      - apk add --no-cache curl bash coreutils sed python3 openssh-keygen
       - mkdir -p secrets
       # fetch registry creds
       - ./ci/vlt kv_to_file kv registry user secrets/REGISTRY_USER 600