diff --git a/.changeset/fix-pin-cargo-llvm-cov.md b/.changeset/fix-pin-cargo-llvm-cov.md
new file mode 100644
index 00000000..8fbe3da6
--- /dev/null
+++ b/.changeset/fix-pin-cargo-llvm-cov.md
@@ -0,0 +1,5 @@
+---
+"@googleworkspace/cli": patch
+---
+
+Add --locked flag to cargo install cargo-llvm-cov in coverage.sh for reproducible installs
diff --git a/scripts/coverage.sh b/scripts/coverage.sh
index 41df484f..9f56916f 100755
--- a/scripts/coverage.sh
+++ b/scripts/coverage.sh
@@ -18,7 +18,7 @@ set -euo pipefail
 # Check if cargo-llvm-cov is installed
 if ! cargo llvm-cov --version &> /dev/null; then
   echo "cargo-llvm-cov is not installed. Installing..."
-  cargo install cargo-llvm-cov
+  cargo install --locked cargo-llvm-cov
 fi
 
 # Run coverage and generate HTML report