diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 24d3ae7..763b019 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -12,6 +12,8 @@ on:
       - 'store/**'
       - 'weekly_collector.py'
       - 'polygon_client.py'
+      - 'ssm_secrets.py'
+      - 'lambda/**'
       - 'config.py'
       - 'requirements*.txt'
       - 'Dockerfile*'
diff --git a/Dockerfile b/Dockerfile
index 8229014..2ff6dac 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,6 +11,7 @@ COPY collectors/ ${LAMBDA_TASK_ROOT}/collectors/
 COPY polygon_client.py ${LAMBDA_TASK_ROOT}/
 COPY weekly_collector.py ${LAMBDA_TASK_ROOT}/
 COPY store/ ${LAMBDA_TASK_ROOT}/store/
+COPY ssm_secrets.py ${LAMBDA_TASK_ROOT}/
 
 # NOTE: config.yaml is intentionally NOT copied here. It is gitignored
 # (contains bucket names + prefixes that we keep out of the public repo)