diff --git a/environments/orocrm/ce/4.2/php@7.4/Dockerfile b/environments/orocrm/ce/4.2/php@7.4/Dockerfile
index c158684..67e1456 100644
--- a/environments/orocrm/ce/4.2/php@7.4/Dockerfile
+++ b/environments/orocrm/ce/4.2/php@7.4/Dockerfile
@@ -30,4 +30,10 @@ RUN set -ex\
     && docker-php-ext-install tidy \
     && docker-php-ext-configure ldap --with-ldap \
     && docker-php-ext-install ldap \
+    && EXPECTED_SIGNATURE="$(wget -q -O - https://composer.github.io/installer.sig)" \
+    && php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" \
+    && ACTUAL_SIGNATURE="$(php -r "echo hash_file('sha384', 'composer-setup.php');")" \
+    && if [ "$EXPECTED_SIGNATURE" != "$ACTUAL_SIGNATURE" ]; then >&2 echo 'ERROR: Invalid installer signature'; rm composer-setup.php; exit 1; fi \
+    && php composer-setup.php --install-dir /usr/local/bin --filename composer --2 \
+    && php -r "unlink('composer-setup.php');"
     && rm -rf /tmp/* /var/cache/apk/*