diff --git a/crates/flux-releaser/src/app/infra/grpc.rs b/crates/flux-releaser/src/app/infra/grpc.rs
index a507b59..8a50272 100644
--- a/crates/flux-releaser/src/app/infra/grpc.rs
+++ b/crates/flux-releaser/src/app/infra/grpc.rs
@@ -20,7 +20,7 @@ pub async fn new_client(registry: impl Into<String>) -> anyhow::Result<FluxRelea
     });
 
     let channel = if registry.starts_with("https") {
-        let tls = ClientTlsConfig::new();
+        let tls = ClientTlsConfig::new().with_native_roots();
 
         Channel::from_shared(registry)?
             .tls_config(tls)?