diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index ccbcfdb..c6dc2b8 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -238,6 +238,7 @@ jobs:
       - name: Run Clippy
         run: |
           cargo hack clippy \
+            --locked \
             --workspace --all-targets \
             --feature-powerset \
             --exclude-features bb_rs,bb_utxo
diff --git a/README.md b/README.md
index 1503950..d49b0f5 100644
--- a/README.md
+++ b/README.md
@@ -363,6 +363,7 @@ cargo hakari manage-deps --yes
 ```
 
 The `Rust / Hakari Check` GitHub workflow enforces that the crate stays synchronized; if it fails, re-run the commands above and commit the resulting changes.
+The main `Test` workflow also verifies `Cargo.lock` during its clippy run by adding `--locked` to `cargo hack clippy`; if that check reports that the lockfile needs updates, regenerate and commit `Cargo.lock` before retrying CI.
 
 ## Contributing