diff --git a/Dockerfile.ci b/Dockerfile.ci
index 4bb9d7a..4126b9a 100644
--- a/Dockerfile.ci
+++ b/Dockerfile.ci
@@ -23,9 +23,9 @@ FROM node:24-alpine
 
 # Native toolchain required to compile node-gyp deps on musl, plus the
 # postgresql-client used by the test step's pg_isready readiness probe. `bash`
-# is baked here too — the sanitization step in ci.yml otherwise does a per-run
-# `apk add bash`.
-RUN apk add --no-cache python3 make g++ postgresql-client bash
+# and `git` are baked here too — framework shell tests require both without
+# paying for per-run package installation in ci.yml.
+RUN apk add --no-cache python3 make g++ postgresql-client bash git
 
 # Pin pnpm to the repo's packageManager version via corepack.
 RUN corepack enable && corepack prepare pnpm@10.6.2 --activate