diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index d116bf135d2d2debd95f42fd1f8053187ce321c5..94f97a6dc981deb0029ee3a7cbf752b8453d1f0e 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -16,13 +16,13 @@ stages:
 test:
   stage: test
   script:
-    - yarn install
+    - yarn install --frozen-lockfile
     - yarn run test
 
 linting:
   stage: test
   script:
-    - yarn install
+    - yarn install --frozen-lockfile
     - yarn run lint
 
 publish:
@@ -36,7 +36,7 @@ publish:
     # NPM_TOKEN needs to be a "Publish" token with 2FA disabled!
     # "Automation" tokens don't work with lerna (even if they would work with "npm publish")
     - echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > ~/.npmrc
-    - yarn install
+    - yarn install --frozen-lockfile
     - yarn run build
     - yarn run publish
 
diff --git a/.gitlab-ci/deploy.php b/.gitlab-ci/deploy.php
index 2f134048232e206874db5d4ed3d1485991af1318..1ce2babeea9a90395179dc909820122ce1fadfef 100644
--- a/.gitlab-ci/deploy.php
+++ b/.gitlab-ci/deploy.php
@@ -39,7 +39,7 @@ host('development')
 
 task('build', function () {
     $stage = get('stage');
-    runLocally("yarn install");
+    runLocally("yarn install --frozen-lockfile");
     runLocally("APP_ENV=$stage yarn run build");
 });