diff --git a/dev/ci/setup-host b/dev/ci/setup-host
index b8db2bf3b1..73609fb280 100755
--- a/dev/ci/setup-host
+++ b/dev/ci/setup-host
@@ -36,7 +36,7 @@ if [ "${GITHUB_ACTIONS:-false}" = "true" ]; then
         if [ "$OS" = "macos" ]; then
             brew update
             brew install ccache
-            security add-trusted-cert -d -r trustRoot -p codeSign -k ~/Library/Keychains/login.keychain-db "$PASSENGER_ROOT/dev/ci/Certificates.cer"
+            sudo security add-trusted-cert -d -r trustRoot -p codeSign -k ~/Library/Keychains/login.keychain-db "$PASSENGER_ROOT/dev/ci/Certificates.cer"
         fi
 
 	echo