diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c37b7bc445a5..a2b832f50a38 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -283,6 +283,8 @@ jobs:
           "https://vault.azure.net" -t ${{ secrets.AZURE_TENANT_ID }} | jq -r
           .accessToken)" {} \;
 
+          python3 -m pip install --break-system-packages cryptography
+
           echo "${{ secrets.SIGN_BASE64 }}" | base64 --decode > sign.zip
 
           unzip -q sign.zip
@@ -812,6 +814,7 @@ jobs:
           if [ -d "$PWD"/waterfox/browser/locales/en-GB ]; then
             ./mach package-multi-locale --locales ar cs da de el en-GB en-US es-ES es-MX fr hu id it ja ko lt nl nn-NO pl pt-BR pt-PT ru sv-SE th vi zh-CN zh-TW
           fi
+          python3 -m pip install --break-system-packages cryptography
           echo "${{ secrets.SIGN_BASE64 }}" | base64 --decode > sign.zip
           unzip -q sign.zip
           rm sign.zip