From a55b0eae332582acc5c29e7ef1ece16b0b914441 Mon Sep 17 00:00:00 2001
From: "securityeng-bot[bot]"
 <219863240+securityeng-bot[bot]@users.noreply.github.com>
Date: Fri, 12 Jun 2026 18:24:47 +0000
Subject: [PATCH] fix: use lockfile-aware install commands

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 83063c73..5b9ee4de 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,7 +14,7 @@ COPY app/src ./src
 # Run tests to validate app
 FROM app-base AS test
 COPY .yarnrc.yml .
-RUN yarn install
+RUN yarn install --immutable
 RUN yarn test
 
 # Clear out the node_modules and create the zip