diff --git a/dogfood/Dockerfile b/dogfood/Dockerfile
index c63dba5ffa..119b3f281b 100644
--- a/dogfood/Dockerfile
+++ b/dogfood/Dockerfile
@@ -2,7 +2,7 @@ FROM rust:slim AS rust-utils
 # Install rust helper programs
 # ENV CARGO_NET_GIT_FETCH_WITH_CLI=true
 env CARGO_INSTALL_ROOT=/tmp/
-RUN cargo install exa bat ripgrep typos-cli
+RUN cargo install exa bat ripgrep typos-cli watchexec-cli
 
 FROM ubuntu AS go
 
@@ -160,7 +160,6 @@ RUN apt-get update --quiet && apt-get install --yes \
       podman \
       skopeo \
       fish \
-      gh \
 			unzip \
       zstd && \
     # Delete package cache to avoid consuming space in layer
@@ -168,6 +167,11 @@ RUN apt-get update --quiet && apt-get install --yes \
     # Configure FIPS-compliant policies
     update-crypto-policies --set FIPS
 
+# See https://github.com/cli/cli/issues/6175#issuecomment-1235984381 for proof
+# the apt repository is unreliable
+RUN curl -L https://github.com/cli/cli/releases/download/v2.14.7/gh_2.14.7_linux_amd64.deb -o gh.deb && \
+    dpkg -i gh.deb
+
 # Install frontend utilities
 RUN apt-get update && \
     # Node.js (from nodesource) and Yarn (from yarnpkg)
diff --git a/dogfood/Makefile b/dogfood/Makefile
index ecf0ce5d6f..061530f50d 100644
--- a/dogfood/Makefile
+++ b/dogfood/Makefile
@@ -3,8 +3,8 @@
 branch=$(shell git rev-parse --abbrev-ref HEAD)
 build_tag=codercom/oss-dogfood:${branch}
 
-docker-build:
+build:
 	DOCKER_BUILDKIT=1 docker build . -t ${build_tag}
 
-docker-push: docker-build
+push: build
 	docker push ${build_tag}