diff --git a/.gitlab/shell.nix b/.gitlab/shell.nix
index 191916671f22f029fdcda2fe6b763e178cb17747..70d3d08ffa67d98f372ffa065a2a9f04b6a377c4 100644
--- a/.gitlab/shell.nix
+++ b/.gitlab/shell.nix
@@ -11,7 +11,7 @@
   # the real fix is to teach terminfo to use libcurses on macOS.
   CONFIGURE_ARGS = "--with-intree-gmp --with-curses-libraries=${pkgs.ncurses.out}/lib";
 
-  buildInputs = with pkgs; [
+  buildInputs = (with pkgs; [
     haskell.compiler.${compiler}
     haskell.packages.${compiler}.cabal-install
     haskell.packages.${compiler}.alex
@@ -47,6 +47,6 @@
     xz
     xlibs.lndir
 
-    cacert
-  ];
+    cacert ])
+  ++ (with pkgs.darwin.apple_sdk.frameworks; [ Foundation Security ]);
 }