diff --git a/.github/.container-structure-test-config.yaml b/.github/.container-structure-test-config.yaml
index c463a7a..2ce44f1 100644
--- a/.github/.container-structure-test-config.yaml
+++ b/.github/.container-structure-test-config.yaml
@@ -73,6 +73,11 @@ commandTests:
     command: "su-exec"
     expectedOutput: ["^Usage: su-exec user-spec command \\[args\\]\\n$"]
 
+  - name: "ssh"
+    command: "ssh"
+    args: [ "-V" ]
+    expectedError: ["^OpenSSH_9\\.[0-9]+"]
+
 fileExistenceTests:
   - name: 'terrascan init'
     path: '/root/.terrascan/pkg/policies/opa/rego/github/github_repository/privateRepoEnabled.rego'
diff --git a/Dockerfile b/Dockerfile
index ef01ec6..00a502b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -185,7 +185,9 @@ RUN apk add --no-cache \
     musl-dev=~1 \
     gcc=~12 \
     # entrypoint wrapper deps
-    su-exec=~0.2
+    su-exec=~0.2 \
+    # ssh-client for external private module in ssh
+    openssh-client=~9
 
 # Copy tools
 COPY --from=builder \