diff --git a/.github/workflows/ifx_package_core.yml b/.github/workflows/ifx_package_core.yml
index 5113e58fa..388776ada 100644
--- a/.github/workflows/ifx_package_core.yml
+++ b/.github/workflows/ifx_package_core.yml
@@ -215,6 +215,15 @@ jobs:
           key: ${{ github.job }}-${{ matrix.board }} # independent caches
           path: ~/.cache/ccache
 
+      - name: Install PSE84 signing dependencies
+        if: ${{ matrix.board == 'kit_pse84_ai' }}
+        run: |
+          # imgtool (invoked by hal_infineon's pse84_metadata.cmake to sign the
+          # image) needs these; its own pip-install-at-configure-time attempt
+          # only warns on failure, so pre-install them here to be safe.
+          source venv/bin/activate
+          pip3 install cryptography cbor2 click intelhex Pillow
+
       - name: Build loader
         shell: bash
         run: |