diff --git a/shell.nix b/shell.nix
index 4a213dcc2..ff3854e32 100644
--- a/shell.nix
+++ b/shell.nix
@@ -5,6 +5,7 @@ with pkgs;
 mkShell {
   buildInputs = [
     bazel
+    cacert
     gcc
     nix
   ];