diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e5ddca118..10818016b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -145,8 +145,9 @@ jobs:
     - name: Install tools
       # Note: Swatinem/rust-cache will cache these installed binaries, so we don't have to worry
       # about caching the builds of them.
+      # cargo-mutants is not used in this step but it will be cached for later use.
       run: |
-        cargo install wasm-pack@0.12.1 cargo-about@0.6.1 cargo-mutants@24.1.0
+        cargo install --locked wasm-pack@0.12.1 cargo-about@0.6.1 cargo-mutants@24.1.0
 
 
     - run: df -h .
@@ -267,7 +268,7 @@ jobs:
     - name: Install tools
       # These should already be installed but we might have a cache miss, so don't fail in that case.
       run: |
-        cargo install wasm-pack@0.12.1 cargo-about@0.6.1
+        cargo install --locked wasm-pack@0.12.1 cargo-about@0.6.1
 
     - run: df -h .
 
@@ -324,7 +325,7 @@ jobs:
 
       # Install cargo-mutants
       # This should usually be already installed, but is present in case of cache miss
-      - run: cargo install --version 24.1.0 cargo-mutants
+      - run: cargo install --locked cargo-mutants@24.1.0
 
       - name: Relative diff
         run: |
diff --git a/.github/workflows/mutants.yml b/.github/workflows/mutants.yml
index 7a01e6c1a..51d17fae8 100644
--- a/.github/workflows/mutants.yml
+++ b/.github/workflows/mutants.yml
@@ -22,7 +22,7 @@ jobs:
         run: rustup toolchain install stable --profile=minimal
 
       - name: Install cargo-mutants
-        run: cargo install --version 24.1.0 cargo-mutants
+        run: cargo install --locked cargo-mutants@24.1.0
 
       - name: Run mutation testing for all-is-cubes
         timeout-minutes: 60
diff --git a/.github/workflows/unstable-ci.yml b/.github/workflows/unstable-ci.yml
index a04d4e913..e7e8dd533 100644
--- a/.github/workflows/unstable-ci.yml
+++ b/.github/workflows/unstable-ci.yml
@@ -99,7 +99,7 @@ jobs:
       # Note: Swatinem/rust-cache will cache these installed binaries, so we don't have to worry
       # about caching the builds of them.
       run: |
-        cargo install wasm-pack@0.12.1 cargo-about@0.6.1
+        cargo install --locked wasm-pack@0.12.1 cargo-about@0.6.1
 
     - name: Compile basic tests
       # compile is broken out so we have visibility into compile vs. run times