diff --git a/images/pre-commit/Dockerfile b/images/pre-commit/Dockerfile
index 6794071364d0eff721b3997155dd74169f42aed0..f1d99271ea02e38458f5bff92985cbc7acf8f38b 100644
--- a/images/pre-commit/Dockerfile
+++ b/images/pre-commit/Dockerfile
@@ -1,6 +1,10 @@
 FROM buildpack-deps:bullseye
+COPY --chown=root:root sources.d/* /etc/apt/sources.list.d/
+SHELL ["/bin/ash", "-eo", "pipefail", "-c"]
 # hadolint ignore=DL3008,DL3013
-RUN apt-get update && \
+RUN curl -fsSL https://apt.releases.hashicorp.com/gpg | \
+    gpg --no-default-keyring --import --batch --keyring /usr/share/keyrings/hashicorp.gpg && \
+    apt-get update && \
     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
         docker.io \
         python3-dev \
diff --git a/images/pre-commit/sources.d/hashicorp.sources b/images/pre-commit/sources.d/hashicorp.sources
new file mode 100644
index 0000000000000000000000000000000000000000..f01300c8b64145a7f73aedddcda34cff8feef990
--- /dev/null
+++ b/images/pre-commit/sources.d/hashicorp.sources
@@ -0,0 +1,5 @@
+Types: deb
+URIs: https://apt.releases.hashicorp.com
+Suites: buster
+Components: main
+Signed-By: /usr/share/keyrings/hashicorp.gpg