diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 144b609c..7f3da468 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,5 +1,5 @@
-.add-go-task: &add-go-task
-- "apk add go-task"
+.apk-add: &apk-add
+- "apk add go-task diffutils"
 .disable-hainish: &disable-hainish
 - "echo \"HAINISH=\" >> .env.production"
 
@@ -19,8 +19,8 @@ assets:
   - "git config --global user.email \"${GIT_USER_EMAIL:-$GITLAB_USER_EMAIL}\""
   - "git config --global user.name \"${GIT_USER_NAME:-$GITLAB_USER_NAME}\""
   - "git remote set-url --push origin \"https://${GITLAB_USERNAME}:${GITLAB_TOKEN}@${CI_SERVER_HOST}/${CI_PROJECT_PATH}.git\""
-  - "apk add brotli diffutils"
-  - *add-go-task
+  - "apk add brotli"
+  - *apk-add
   - *disable-hainish
   script:
   - "go-task assets"
@@ -31,14 +31,14 @@ gem-audit:
   stage: "test"
   before_script:
   - "gem install bundler-audit"
-  - *add-go-task
+  - *apk-add
   - *disable-hainish
   script:
   - "go-task gem-audit"
 node-audit:
   stage: "test"
   before_script:
-  - *add-go-task
+  - *apk-add
   - *disable-hainish
   script:
   - "apk add go-task"
@@ -48,7 +48,7 @@ brakeman:
   rules:
   - if: "$CI_PIPELINE_SOURCE == 'merge_request_event'"
   before_script:
-  - *add-go-task
+  - *apk-add
   - *disable-hainish
   script:
   - "go-task bundle -- exec brakeman"
@@ -57,7 +57,7 @@ rubocop:
   rules:
   - if: "$CI_PIPELINE_SOURCE == 'merge_request_event'"
   before_script:
-  - *add-go-task
+  - *apk-add
   - *disable-hainish
   script:
   - "./bin/modified_files | grep .rb | xargs go-task bundle -- exec rubocop"
@@ -66,7 +66,7 @@ haml:
   rules:
   - if: "$CI_PIPELINE_SOURCE == 'merge_request_event'"
   before_script:
-  - *add-go-task
+  - *apk-add
   - *disable-hainish
   script:
   - "./bin/modified_files | grep .haml | xargs go-task bundle -- exec haml-lint"