diff --git a/.github/workflows/ci-main.yml b/.github/workflows/ci-main.yml
index a7d30d8fb..4059d3bd2 100644
--- a/.github/workflows/ci-main.yml
+++ b/.github/workflows/ci-main.yml
@@ -138,7 +138,7 @@ jobs:
         if: steps.cache-web.outputs.cache-hit != 'true'
         run: |
           cd web
-          npm i
+          npm ci
           npm run build
       - name: run e2e
         run: |
@@ -171,7 +171,7 @@ jobs:
         if: steps.cache-web.outputs.cache-hit != 'true'
         run: |
           cd web
-          npm i
+          npm ci
           npm run build
       - name: run e2e
         run: |
diff --git a/.github/workflows/ci-outpost.yml b/.github/workflows/ci-outpost.yml
index 49f539d6f..917b83086 100644
--- a/.github/workflows/ci-outpost.yml
+++ b/.github/workflows/ci-outpost.yml
@@ -116,7 +116,7 @@ jobs:
       - name: Build web
         run: |
           cd web
-          npm install
+          npm ci
           npm run build-proxy
       - name: Build outpost
         run: |
diff --git a/.github/workflows/ci-web.yml b/.github/workflows/ci-web.yml
index a2da08aa5..bd9140b9c 100644
--- a/.github/workflows/ci-web.yml
+++ b/.github/workflows/ci-web.yml
@@ -22,7 +22,7 @@ jobs:
           cache-dependency-path: web/package-lock.json
       - run: |
           cd web
-          npm install
+          npm ci
       - name: Generate API
         run: make gen-web
       - name: Eslint
@@ -40,7 +40,7 @@ jobs:
           cache-dependency-path: web/package-lock.json
       - run: |
           cd web
-          npm install
+          npm ci
       - name: Generate API
         run: make gen-web
       - name: prettier
@@ -58,7 +58,7 @@ jobs:
           cache-dependency-path: web/package-lock.json
       - run: |
           cd web
-          npm install
+          npm ci
       - name: Generate API
         run: make gen-web
       - name: lit-analyse
@@ -86,7 +86,7 @@ jobs:
           cache-dependency-path: web/package-lock.json
       - run: |
           cd web
-          npm install
+          npm ci
       - name: Generate API
         run: make gen-web
       - name: build
diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
index 8752e480d..b0cbf70b1 100644
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@@ -99,7 +99,7 @@ jobs:
       - name: Build web
         run: |
           cd web
-          npm install
+          npm ci
           npm run build-proxy
       - name: Build outpost
         run: |
diff --git a/.github/workflows/web-api-publish.yml b/.github/workflows/web-api-publish.yml
index 22623fb75..ada95439a 100644
--- a/.github/workflows/web-api-publish.yml
+++ b/.github/workflows/web-api-publish.yml
@@ -19,7 +19,7 @@ jobs:
       - name: Publish package
         run: |
           cd web-api/
-          npm i
+          npm ci
           npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
diff --git a/Dockerfile b/Dockerfile
index 3d3835b4f..2b9cd4a78 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@ FROM --platform=${BUILDPLATFORM} docker.io/node:16 as website-builder
 COPY ./website /work/website/
 
 ENV NODE_ENV=production
-RUN cd /work/website && npm i && npm run build-docs-only
+RUN cd /work/website && npm ci && npm run build-docs-only
 
 # Stage 2: Build webui
 FROM --platform=${BUILDPLATFORM} docker.io/node:16 as web-builder
@@ -13,7 +13,7 @@ COPY ./web /work/web/
 COPY ./website /work/website/
 
 ENV NODE_ENV=production
-RUN cd /work/web && npm i && npm run build
+RUN cd /work/web && npm ci && npm run build
 
 # Stage 3: Build go proxy
 FROM docker.io/golang:1.18.1-bullseye AS builder
diff --git a/Makefile b/Makefile
index 0dfd05916..1afa0d2b8 100644
--- a/Makefile
+++ b/Makefile
@@ -132,8 +132,8 @@ ci-pending-migrations: ci--meta-debug
 
 install:
 	poetry install
-	cd web && npm i
-	cd website && npm i
+	cd web && npm ci
+	cd website && npm ci
 
 a: install
 	tmux \
diff --git a/proxy.Dockerfile b/proxy.Dockerfile
index 2da0b6349..80af54b96 100644
--- a/proxy.Dockerfile
+++ b/proxy.Dockerfile
@@ -4,7 +4,7 @@ FROM --platform=${BUILDPLATFORM} docker.io/node:16 as web-builder
 COPY ./web /static/
 
 ENV NODE_ENV=production
-RUN cd /static && npm i && npm run build-proxy
+RUN cd /static && npm ci && npm run build-proxy
 
 # Stage 2: Build
 FROM docker.io/golang:1.18.1-bullseye AS builder