From ce83fac5e971b623cb91c53d05975a3f4e5515ac Mon Sep 17 00:00:00 2001
From: Ben Johnson <ben@binarylogic.com>
Date: Tue, 31 Mar 2026 10:13:41 -0700
Subject: [PATCH] chore: harden docs toolchain installs

---
 Taskfile.yml   | 2 +-
 bin/hermit.hcl | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/Taskfile.yml b/Taskfile.yml
index 24cb72f..478f88f 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -41,4 +41,4 @@ tasks:
   install:
     desc: "Install dependencies"
     cmds:
-      - pnpm install
+      - pnpm install --frozen-lockfile
diff --git a/bin/hermit.hcl b/bin/hermit.hcl
index 081cbe8..297f158 100644
--- a/bin/hermit.hcl
+++ b/bin/hermit.hcl
@@ -1,2 +1,4 @@
+sources = ["https://github.com/usetero/hermit-packages.git", "https://github.com/cashapp/hermit-packages.git"]
+
 github-token-auth {
 }