diff --git a/Dockerfile b/Dockerfile
index 80307bd..66bf33f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,7 +3,10 @@
 FROM node:22-alpine AS frontend-builder
 WORKDIR /build
 COPY frontend/package.json frontend/package-lock.json* ./
-RUN npm ci --no-audit --no-fund
+# No package-lock.json is tracked yet (we don't run npm locally per
+# feedback-no-local-runs), so `npm install` instead of `npm ci`. Flip to
+# `npm ci` once a lockfile is committed.
+RUN npm install --no-audit --no-fund
 COPY frontend/ ./
 RUN npm run build