diff --git a/.github/workflows/build-extension-catalog.yml b/.github/workflows/build-extension-catalog.yml
index 6bae0afae2b..1ed36e044dc 100644
--- a/.github/workflows/build-extension-catalog.yml
+++ b/.github/workflows/build-extension-catalog.yml
@@ -78,7 +78,7 @@ jobs:
           cache: yarn
 
       - name: Install dependencies
-        run: yarn
+        run: yarn install --frozen-lockfile
 
       - name: Parse Extension Name
         if: github.ref_type == 'tag' || inputs.is_test == 'true'
diff --git a/.github/workflows/build-extension-charts.yml b/.github/workflows/build-extension-charts.yml
index 2e2b499aae2..d85702c7d9c 100644
--- a/.github/workflows/build-extension-charts.yml
+++ b/.github/workflows/build-extension-charts.yml
@@ -78,7 +78,7 @@ jobs:
           node-version-file: '.nvmrc'
 
       - name: Install dependencies
-        run: yarn
+        run: yarn install --frozen-lockfile
 
       - name: Parse Extension Name
         if: github.ref_type == 'tag' || inputs.is_test == 'true'
diff --git a/.github/workflows/build-extensions-test.yml b/.github/workflows/build-extensions-test.yml
index 0dfb9984c92..d8d39d31610 100644
--- a/.github/workflows/build-extensions-test.yml
+++ b/.github/workflows/build-extensions-test.yml
@@ -131,7 +131,7 @@ jobs:
       - name: Install Dependencies
         if: ${{ matrix.folder != '_skip_' }}
         shell: bash
-        run: yarn install
+        run: yarn install --frozen-lockfile
 
       - name: "Build extension: ${{ matrix.folder }}"
         if: ${{ matrix.folder != '_skip_' }}
diff --git a/.github/workflows/create-pr-build-extension-charts.yml b/.github/workflows/create-pr-build-extension-charts.yml
index 313b6a4a900..cfdf072cb04 100644
--- a/.github/workflows/create-pr-build-extension-charts.yml
+++ b/.github/workflows/create-pr-build-extension-charts.yml
@@ -57,7 +57,7 @@ jobs:
           node-version-file: '.nvmrc'
 
       - name: Install dependencies
-        run: yarn
+        run: yarn install --frozen-lockfile
 
       - name: Parse Extension Name
         if: github.ref_type == 'tag'
diff --git a/.github/workflows/rancher-components.yaml b/.github/workflows/rancher-components.yaml
index 0fe58b156cc..4658a7bcdc9 100644
--- a/.github/workflows/rancher-components.yaml
+++ b/.github/workflows/rancher-components.yaml
@@ -18,7 +18,7 @@ jobs:
           node-version-file: '.nvmrc'
       
       - name: Install packages
-        run: yarn install
+        run: yarn install --frozen-lockfile
 
       - name: Verify build
         run: yarn build:lib
@@ -34,7 +34,7 @@ jobs:
           node-version-file: '.nvmrc'
       
       - name: Install packages
-        run: yarn install
+        run: yarn install --frozen-lockfile
       
       - name: Run linters
         run: yarn lint:lib
diff --git a/.github/workflows/scripts/test-extensions-creators-build.sh b/.github/workflows/scripts/test-extensions-creators-build.sh
index de0d861d37d..dbe489b77ec 100755
--- a/.github/workflows/scripts/test-extensions-creators-build.sh
+++ b/.github/workflows/scripts/test-extensions-creators-build.sh
@@ -40,7 +40,7 @@ validate_tagged_extension_creator() {
   cd ${SKELETON_APP_NAME}
 
   # install dependencies
-  yarn install
+  yarn install --frozen-lockfile
 
   # test build of pkg inside skeleton app
   yarn build-pkg ${SKELETON_APP_NAME} | cat
@@ -70,7 +70,7 @@ validate_tagged_extension_creator() {
     rm -rf node_modules
     rm -rf yarn.lock
 
-    yarn install
+    yarn install --frozen-lockfile
 
     cat package.json
 
@@ -93,7 +93,7 @@ validate_tagged_extension_creator() {
     rm -rf node_modules
     rm -rf yarn.lock
 
-    yarn install
+    yarn install --frozen-lockfile
 
     yarn build-pkg ${SKELETON_APP_NAME} | cat
   fi
diff --git a/.github/workflows/storybook.yaml b/.github/workflows/storybook.yaml
index 5ef5e96faf4..f15c160ff20 100644
--- a/.github/workflows/storybook.yaml
+++ b/.github/workflows/storybook.yaml
@@ -34,7 +34,7 @@ jobs:
       with:
         node-version-file: '.nvmrc'
     - name: Install packages
-      run: yarn install
+      run: yarn install --frozen-lockfile
     - name: Build Storybook
       run: |
         yarn build-storybook
diff --git a/.github/workflows/update-cloud-data.yml b/.github/workflows/update-cloud-data.yml
index d0f7602235e..7b051b0e5f1 100644
--- a/.github/workflows/update-cloud-data.yml
+++ b/.github/workflows/update-cloud-data.yml
@@ -21,7 +21,7 @@ jobs:
       with:
         node-version-file: '.nvmrc'
     - name: Install Node Module
-      run: yarn install
+      run: yarn install --frozen-lockfile
     - name: Update Cloud Data
       env:
         GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/package.json b/package.json
index d0d693f3004..bffc716220e 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,7 @@
     "storybook": "cd storybook && yarn storybook",
     "build-storybook": "cd storybook && yarn install --frozen-lockfile && NODE_OPTIONS=--max_old_space_size=4096 yarn build-storybook --quiet",
     "storybook-test": "cd storybook && yarn test-storybook --stories-json ",
-    "docs:install": "cd docusaurus/ && yarn install",
+    "docs:install": "cd docusaurus/ && yarn install --frozen-lockfile",
     "docs:build": "cd docusaurus/ && yarn build",
     "docs:start": "cd docusaurus/ && yarn start",
     "docs:serve": "cd docusaurus/ && yarn serve",
diff --git a/scripts/build-e2e b/scripts/build-e2e
index 9a9f2fd600d..7686417236f 100755
--- a/scripts/build-e2e
+++ b/scripts/build-e2e
@@ -28,7 +28,7 @@ OUTPUT_DIR="${E2E_BUILD_DIST_DIR:-dist}"
 
 if [ "$BUILD_DASHBOARD" == "true" ]; then
     echo "Building production build for e2e ..."
-    yarn --pure-lockfile install
+    yarn install --frozen-lockfile
 
     source scripts/version
     echo "BRANCH: ${COMMIT_BRANCH:-<none>}"
diff --git a/scripts/build-embedded b/scripts/build-embedded
index 6e673b61853..2bd13662b99 100755
--- a/scripts/build-embedded
+++ b/scripts/build-embedded
@@ -11,7 +11,7 @@ fi
 cd $(dirname $0)/..
 
 echo "Bootstrapping..."
-yarn --pure-lockfile install
+yarn install --frozen-lockfile
 
 source scripts/version
 echo "BRANCH: ${COMMIT_BRANCH:-<none>}"
diff --git a/scripts/build-hosted b/scripts/build-hosted
index 0d58d1775ab..3b817863a26 100755
--- a/scripts/build-hosted
+++ b/scripts/build-hosted
@@ -10,7 +10,7 @@ fi
 cd $(dirname $0)/..
 
 echo "Bootstrapping..."
-yarn --pure-lockfile install
+yarn install --frozen-lockfile
 
 source scripts/version
 echo "BRANCH: ${COMMIT_BRANCH:-<none>}"
diff --git a/scripts/standalone/package.sh b/scripts/standalone/package.sh
index 8b79e3ce27d..471949f1335 100755
--- a/scripts/standalone/package.sh
+++ b/scripts/standalone/package.sh
@@ -20,13 +20,13 @@ cp ${DIR}/shell/server/server.* ./cert
 
 if [ ! -d "${DIR}/dist/" ]; then
   pushd ${DIR}
-  yarn install
+  yarn install --frozen-lockfile
   yarn build
   popd
 fi
 
 if [ ! -d "node_modules" ]; then
-  yarn install --no-lockfile
+  yarn install --frozen-lockfile
 fi
 
 rm -rf ui
diff --git a/shell/scripts/test-plugins-build.sh b/shell/scripts/test-plugins-build.sh
index 30563d7282c..1620b7a1091 100755
--- a/shell/scripts/test-plugins-build.sh
+++ b/shell/scripts/test-plugins-build.sh
@@ -107,7 +107,7 @@ createTestComponent() {
 
 # Publish shell pkg (tag is needed as publish-shell is optimized to work with release-shell-pkg workflow)
 echo "Publishing Shell package to local registry"
-yarn install
+yarn install --frozen-lockfile
 export TAG="shell-pkg-v${SHELL_VERSION}"
 ${SHELL_DIR}/scripts/publish-shell.sh
 
@@ -139,7 +139,7 @@ if [ "${SKIP_STANDALONE}" == "false" ]; then
 
   pushd test-app > /dev/null
 
-  yarn install
+  yarn install --frozen-lockfile
   # this is the "same" as doing a yarn dev (in a build sense)
   # it's to make sure the dev environment is running properly
   FORCE_COLOR=true yarn build | cat
@@ -165,7 +165,7 @@ pushd $BASE_DIR
 # Now try a plugin within the dashboard codebase
 echo "Validating in-tree package"
 
-yarn install
+yarn install --frozen-lockfile
 
 if [ "${TEST_PERSIST_BUILD}" != "true" ]; then
   echo "Removing folder ./pkg/test-pkg"
@@ -202,7 +202,7 @@ function clone_repo_test_extension_build() {
   pushd ${BASE_DIR}/$REPO_NAME
 
   echo -e "\nInstalling dependencies for $REPO_NAME\n"
-  yarn install
+  yarn install --frozen-lockfile
 
   # set registry to local verdaccio (to install new shell)
   yarn config set registry ${VERDACCIO_NPM_REGISTRY}