diff --git a/updater/config/.npmrc b/updater/config/.npmrc
index b3f105a1e6..77c19fa789 100644
--- a/updater/config/.npmrc
+++ b/updater/config/.npmrc
@@ -9,5 +9,8 @@ audit=false
 # git installs in npm/cli/lib/pack.js so we set dry-run and ignore-scripts to
 # prevent any lifecycle hooks for git installs. dry-run disables "prepare" and
 # "prepack" scripts, ignore-scripts disables all other scripts
-dry-run=true
-ignore-scripts=true
+; .npmrc file
+cafile = "/usr/local/share/ca-certificates/dbot-ca.crt"
+audit = false
+dry-run = true
+ignore-scripts = true