diff --git a/.github/workflows/build-ios-sim.yml b/.github/workflows/build-ios-sim.yml
index 4a0d6fa6..80eade0e 100644
--- a/.github/workflows/build-ios-sim.yml
+++ b/.github/workflows/build-ios-sim.yml
@@ -272,6 +272,37 @@ jobs:
           cd build/ios/iphonesimulator
           zip -r hash_wallet_ios_sim_${{ github.sha }}.zip Runner.app
 
+      # Make git.such.software resolve to something the runner can actually
+      # reach. Independent of whether the Mac's /etc/hosts has an entry,
+      # we override at job runtime — inside whatever environment this step
+      # actually runs in (native shell, Docker container, etc.). Try
+      # host.docker.internal first (Docker Desktop's host gateway). Fall
+      # back to 127.0.0.1 (works for host-mode runners).
+      - name: Force git.such.software to resolve locally
+        run: |
+          set -x
+          echo "=== before ==="
+          cat /etc/hosts | tail -10 || true
+          getent hosts git.such.software 2>/dev/null || nslookup git.such.software 2>/dev/null || true
+
+          if getent hosts host.docker.internal >/dev/null 2>&1; then
+            TARGET=host.docker.internal
+          else
+            TARGET=127.0.0.1
+          fi
+          echo "Pointing git.such.software → $TARGET"
+          # Remove any prior entry, append ours. sudo if available, plain
+          # write otherwise (root in containers, or NOPASSWD sudo).
+          if command -v sudo >/dev/null; then
+            sudo sh -c "sed -i.bak '/git\\.such\\.software/d' /etc/hosts; echo '$TARGET git.such.software' >> /etc/hosts"
+          else
+            sed -i.bak '/git\.such\.software/d' /etc/hosts
+            echo "$TARGET git.such.software" >> /etc/hosts
+          fi
+          echo "=== after ==="
+          cat /etc/hosts | tail -5
+          getent hosts git.such.software || nslookup git.such.software || true
+
       - name: Upload .app artifact
         uses: actions/upload-artifact@v3
         with: