diff --git a/pkg/config/tls.go b/pkg/config/tls.go
index 2bf5b023..290379ee 100644
--- a/pkg/config/tls.go
+++ b/pkg/config/tls.go
@@ -71,6 +71,7 @@ func GetTLSConfig(cfg tlsConfiger) (tlsConfig *tls.Config, err error) {
 
 		if runtime.GOOS == "darwin" {
 			if err := exec.Command( // nolint[gosec]
+				"/usr/bin/security",
 				"execute-with-privileges",
 				"/usr/bin/security",
 				"add-trusted-cert",