diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2e20318..67d276d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.2.0
+
+* Install OpenSSH client tools to support SSH agent forwarding workflows.
+
 ## 1.1.0
 
 * Install `git` and `git-lfs`.
diff --git a/Dockerfile b/Dockerfile
index c87e756..33264cf 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,7 +10,8 @@ RUN apt-get update -y && \
         ca-certificates \
         curl \
         git \
-        git-lfs && \
+        git-lfs \
+        openssh-client && \
     rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
 
 # Docker
diff --git a/README.md b/README.md
index 6908bfa..209d779 100644
--- a/README.md
+++ b/README.md
@@ -11,11 +11,13 @@ Published to Docker Hub as [`zappi/image-builder`](https://hub.docker.com/r/zapp
 | Base image | Ubuntu 24.04 LTS |
 | [Git](https://git-scm.com/) | distro package |
 | [Git LFS](https://git-lfs.com/) | distro package |
+| [OpenSSH client](https://www.openssh.com/) | distro package |
 | [Docker CLI](https://github.com/docker/cli) | 29.3.0 |
 | [Docker Buildx plugin](https://github.com/docker/buildx) | 0.31.1 |
 | [Amazon ECR Credential Helper](https://github.com/awslabs/amazon-ecr-credential-helper) | 0.12.0 |
 
-`git` and `git-lfs` are included as part of the builder toolchain.
+`git`, `git-lfs` and OpenSSH client tools are included as part of the
+builder toolchain.
 
 The image runs as a non-root `builder` user (UID/GID `65533`).