diff --git a/.github/workflows/flake-hunt.yml b/.github/workflows/flake-hunt.yml
index 4aa30a68..14dd347d 100644
--- a/.github/workflows/flake-hunt.yml
+++ b/.github/workflows/flake-hunt.yml
@@ -27,6 +27,8 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - name: Install test tools
+        run: sudo apt-get update && sudo apt-get install -y ripgrep
 
       - name: Run cargo test --workspace up to 3 times
         id: runs
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index 7bd23549..b91fe4ed 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -90,6 +90,8 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - name: Free disk space
         run: bash scripts/ci-free-disk.sh
+      - name: Install test tools
+        run: sudo apt-get update && sudo apt-get install -y ripgrep
       - uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1
         with:
           cache: false
diff --git a/.github/workflows/release-dry-run.yml b/.github/workflows/release-dry-run.yml
index 6e558416..6b8cc64a 100644
--- a/.github/workflows/release-dry-run.yml
+++ b/.github/workflows/release-dry-run.yml
@@ -14,6 +14,8 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - name: Install test tools
+        run: sudo apt-get update && sudo apt-get install -y ripgrep
       - run: cargo fmt --all --check
       - run: cargo clippy --workspace --all-targets -- -D warnings
       - run: CARGO_TARGET_DIR="${CARGO_TARGET_DIR:-$PWD/target}/redb" cargo fmt --manifest-path crates/contextdb-redb/Cargo.toml --check
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6a7e5a76..ff653ff8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,6 +33,8 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - name: Install test tools
+        run: sudo apt-get update && sudo apt-get install -y ripgrep
       - run: cargo fmt --all --check
       - run: cargo clippy --workspace --all-targets -- -D warnings
       - run: CARGO_TARGET_DIR="${CARGO_TARGET_DIR:-$PWD/target}/redb" cargo fmt --manifest-path crates/contextdb-redb/Cargo.toml --check
diff --git a/scripts/ci-integration.py b/scripts/ci-integration.py
index b8c9366a..afe0fe0e 100644
--- a/scripts/ci-integration.py
+++ b/scripts/ci-integration.py
@@ -853,6 +853,7 @@ def workflow_contract(root=ROOT):
             raise ValueError('unsupported integration job execution metadata: ' + name)
     runs = re.findall(r'^        run: (.*)$', text, re.M)
     if runs != ['python3 -B scripts/ci-integration.py plan', 'bash scripts/ci-free-disk.sh',
+                'sudo apt-get update && sudo apt-get install -y ripgrep',
                 'bash scripts/verify integration "${CI_INTEGRATION_SLICE}"',
                 'python3 -B scripts/ci-integration.py required']:
         raise ValueError('integration command execution changed')