diff --git a/.github/workflows/android_ci.yaml.bak b/.github/workflows/android_ci.yaml.bak
index f7be3db33591c..002255d1594ff 100644
--- a/.github/workflows/android_ci.yaml.bak
+++ b/.github/workflows/android_ci.yaml.bak
@@ -152,7 +152,7 @@ jobs:
           rustup target install aarch64-linux-android
           rustup target install x86_64-linux-android
           rustup target add armv7-linux-androideabi
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
           cargo install cargo-ndk
           if [ "$RUNNER_OS" == "Linux" ]; then
             sudo wget -qO /etc/apt/trusted.gpg.d/dart_linux_signing_key.asc https://dl-ssl.google.com/linux/linux_signing_key.pub
diff --git a/.github/workflows/ios_ci.yaml b/.github/workflows/ios_ci.yaml
index 570f2b2079388..1cdc9971808f4 100644
--- a/.github/workflows/ios_ci.yaml
+++ b/.github/workflows/ios_ci.yaml
@@ -85,7 +85,7 @@ jobs:
         working-directory: frontend
         run: |
           rustup target install aarch64-apple-ios-sim
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
           cargo install cargo-lipo
           cargo make appflowy-flutter-deps-tools
         shell: bash
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 315f3ff310e17..aa18d2095d57d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -74,7 +74,7 @@ jobs:
         run: |
           vcpkg integrate install
           cargo install --force cargo-make
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
 
       - name: Build Windows app
         working-directory: frontend
@@ -159,7 +159,7 @@ jobs:
         working-directory: frontend
         run: |
           cargo install --force cargo-make
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
 
       - name: Build AppFlowy
         working-directory: frontend
@@ -257,7 +257,7 @@ jobs:
         working-directory: frontend
         run: |
           cargo install --force cargo-make
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
 
       - name: Build AppFlowy
         working-directory: frontend
@@ -371,7 +371,7 @@ jobs:
           sudo apt-get install -y alien libnotify-dev
           source $HOME/.cargo/env
           cargo install --force cargo-make
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
           rustup target add ${{ matrix.job.target }}
 
       - name: Install gcc-aarch64-linux-gnu
diff --git a/.github/workflows/rust_coverage.yml b/.github/workflows/rust_coverage.yml
index 4e2dd3c8a41f3..4c2cee2a6b444 100644
--- a/.github/workflows/rust_coverage.yml
+++ b/.github/workflows/rust_coverage.yml
@@ -41,7 +41,7 @@ jobs:
         working-directory: frontend
         run: |
           cargo install --force cargo-make
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
 
       - uses: Swatinem/rust-cache@v2
         with:
diff --git a/.github/workflows/tauri_ci.yaml b/.github/workflows/tauri_ci.yaml
index 1cc817fb7c749..acb11dc3d35d0 100644
--- a/.github/workflows/tauri_ci.yaml
+++ b/.github/workflows/tauri_ci.yaml
@@ -73,7 +73,7 @@ jobs:
         if: matrix.platform == 'windows-latest'
         working-directory: frontend
         run: |
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
           vcpkg integrate install
 
       - name: install dependencies (ubuntu only)
diff --git a/.github/workflows/tauri_release.yml b/.github/workflows/tauri_release.yml
index 4595ec84eaa60..e7639cd16f88f 100644
--- a/.github/workflows/tauri_release.yml
+++ b/.github/workflows/tauri_release.yml
@@ -83,7 +83,7 @@ jobs:
         if: matrix.settings.platform == 'windows-latest'
         working-directory: frontend
         run: |
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
           vcpkg integrate install
 
       - name: install dependencies (ubuntu only)
diff --git a/codemagic.yaml b/codemagic.yaml
index 3e592adb7cdc4..b8934d8be8863 100644
--- a/codemagic.yaml
+++ b/codemagic.yaml
@@ -20,7 +20,7 @@ workflows:
 
           rustup target install aarch64-apple-ios-sim
           cargo install --force cargo-make
-          cargo install --force duckscript_cli
+          cargo install --force --locked duckscript_cli
           cargo install --force cargo-lipo
 
           cargo make appflowy-flutter-deps-tools
diff --git a/frontend/scripts/docker-buildfiles/Dockerfile b/frontend/scripts/docker-buildfiles/Dockerfile
index 0c2636d7c5b4d..a7226d4e02746 100644
--- a/frontend/scripts/docker-buildfiles/Dockerfile
+++ b/frontend/scripts/docker-buildfiles/Dockerfile
@@ -39,8 +39,8 @@ RUN dart pub global activate protoc_plugin 21.1.2
 # Install build dependencies for AppFlowy using pacman
 RUN sudo pacman -S --needed --noconfirm jemalloc git libkeybinder3 sqlite clang rsync libnotify rocksdb zstd mpv
 RUN sudo ln -s /usr/bin/sha1sum /usr/bin/shasum
-RUN source ~/.cargo/env && cargo install cargo-make cargo-binstall
-RUN source ~/.cargo/env && cargo binstall duckscript_cli -y
+RUN source ~/.cargo/env && cargo install cargo-make cargo-binstall --locked
+RUN source ~/.cargo/env && cargo binstall duckscript_cli --locked -y
 
 # Build AppFlowy
 COPY . /appflowy
diff --git a/frontend/scripts/install_dev_env/install_ios.sh b/frontend/scripts/install_dev_env/install_ios.sh
index 5f27fff91346e..004fa6fc0b939 100644
--- a/frontend/scripts/install_dev_env/install_ios.sh
+++ b/frontend/scripts/install_dev_env/install_ios.sh
@@ -89,7 +89,7 @@ cargo install --force cargo-make
 
 # Install duckscript
 printMessage "Installing duckscript."
-cargo install --force duckscript_cli
+cargo install --force --locked duckscript_cli
 
 # Check prerequisites
 printMessage "Checking prerequisites."
diff --git a/frontend/scripts/install_dev_env/install_linux.sh b/frontend/scripts/install_dev_env/install_linux.sh
index 7ec91019ec062..1028605da920d 100755
--- a/frontend/scripts/install_dev_env/install_linux.sh
+++ b/frontend/scripts/install_dev_env/install_linux.sh
@@ -111,7 +111,7 @@ cargo install --force cargo-make
 
 # Install duckscript
 printMessage "Installing duckscript."
-cargo install --force duckscript_cli
+cargo install --force --locked duckscript_cli
 
 # Check prerequisites
 printMessage "Checking prerequisites."
diff --git a/frontend/scripts/install_dev_env/install_macos.sh b/frontend/scripts/install_dev_env/install_macos.sh
index 5bb83c35ad4f7..27ac7ad9d11db 100755
--- a/frontend/scripts/install_dev_env/install_macos.sh
+++ b/frontend/scripts/install_dev_env/install_macos.sh
@@ -86,7 +86,7 @@ cargo install --force cargo-make
 
 # Install duckscript
 printMessage "Installing duckscript."
-cargo install --force duckscript_cli
+cargo install --force --locked duckscript_cli
 
 # Check prerequisites
 printMessage "Checking prerequisites."
diff --git a/frontend/scripts/install_dev_env/install_windows.sh b/frontend/scripts/install_dev_env/install_windows.sh
index 45182df3c02d7..9ff586668c814 100644
--- a/frontend/scripts/install_dev_env/install_windows.sh
+++ b/frontend/scripts/install_dev_env/install_windows.sh
@@ -100,7 +100,7 @@ $USERPROFILE/.cargo/bin/cargo install --force cargo-make
 
 # Install duckscript
 printMessage "Installing duckscript."
-$USERPROFILE/.cargo/bin/cargo install --force duckscript_cli
+$USERPROFILE/.cargo/bin/cargo install --force --locked duckscript_cli
 
 # Enable vcpkg integration
 # Note: Requires admin
diff --git a/frontend/scripts/makefile/env.toml b/frontend/scripts/makefile/env.toml
index a88a4874c7c4c..1bb61f94f7f27 100644
--- a/frontend/scripts/makefile/env.toml
+++ b/frontend/scripts/makefile/env.toml
@@ -37,7 +37,7 @@ script = """
 @echo off
 @duck -h > nul
 if %errorlevel% GTR 0 (
-  echo Please install duckscript at first: cargo install --force duckscript_cli
+  echo Please install duckscript at first: cargo install --force --locked duckscript_cli
   exit -1
 )
 """