diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 28b5571..77e7ac3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -231,10 +231,7 @@ jobs:
 
       - name: Build release (musl)
         if: matrix.target == 'x86_64-unknown-linux-musl'
-        run: cargo build --release --target ${{ matrix.target }} --no-default-features
-        env:
-          OPENSSL_STATIC: 1
-          OPENSSL_VENDORED: 1
+        run: cargo build --release --target ${{ matrix.target }} --no-default-features --features vendored-openssl
 
       - name: Build release (non-musl)
         if: matrix.target != 'x86_64-unknown-linux-musl'
diff --git a/ghost-core/Cargo.toml b/ghost-core/Cargo.toml
index 5b25ae1..9ea0e24 100644
--- a/ghost-core/Cargo.toml
+++ b/ghost-core/Cargo.toml
@@ -8,6 +8,7 @@ license.workspace = true
 [features]
 default = []
 yara-scanning = ["yara"]
+vendored-openssl = ["reqwest/native-tls-vendored"]
 
 [dependencies]
 anyhow.workspace = true