diff --git a/internal/cli/build-cpio.go b/internal/cli/build-cpio.go
index fef620249..eeea2b7ef 100644
--- a/internal/cli/build-cpio.go
+++ b/internal/cli/build-cpio.go
@@ -40,6 +40,7 @@ func buildCPIO() *cobra.Command {
 	var extraRepos []string
 	var extraPackages []string
 	var sizeLimits options.SizeLimits
+	var lockfile string
 
 	cmd := &cobra.Command{
 		Use:     "build-cpio",
@@ -59,6 +60,7 @@ func buildCPIO() *cobra.Command {
 				build.WithSBOM(sbomPath),
 				build.WithArch(types.ParseArchitecture(buildArch)),
 				build.WithSizeLimits(sizeLimits),
+				build.WithLockFile(lockfile),
 			)
 		},
 	}
@@ -71,6 +73,7 @@ func buildCPIO() *cobra.Command {
 	cmd.Flags().StringSliceVarP(&extraRepos, "repository-append", "r", []string{}, "path to extra repositories to include")
 	cmd.Flags().StringSliceVarP(&extraPackages, "package-append", "p", []string{}, "extra packages to include")
 	addClientLimitFlags(cmd, &sizeLimits)
+	cmd.Flags().StringVar(&lockfile, "lockfile", "", "a path to .lock.json file (e.g. produced by apko lock) that constraints versions of packages to the listed ones (default '' means no additional constraints)")
 
 	return cmd
 }
diff --git a/internal/cli/build-minirootfs.go b/internal/cli/build-minirootfs.go
index 0429b7b96..580aceb93 100644
--- a/internal/cli/build-minirootfs.go
+++ b/internal/cli/build-minirootfs.go
@@ -40,6 +40,7 @@ func buildMinirootFS() *cobra.Command {
 	var extraRepos []string
 	var extraPackages []string
 	var sizeLimits options.SizeLimits
+	var lockfile string
 
 	cmd := &cobra.Command{
 		Use:     "build-minirootfs",
@@ -60,6 +61,7 @@ func buildMinirootFS() *cobra.Command {
 				build.WithArch(types.ParseArchitecture(buildArch)),
 				build.WithIgnoreSignatures(ignoreSignatures),
 				build.WithSizeLimits(sizeLimits),
+				build.WithLockFile(lockfile),
 			)
 		},
 	}
@@ -73,6 +75,7 @@ func buildMinirootFS() *cobra.Command {
 	cmd.Flags().StringSliceVarP(&extraRepos, "repository-append", "r", []string{}, "path to extra repositories to include")
 	cmd.Flags().StringSliceVarP(&extraPackages, "package-append", "p", []string{}, "extra packages to include")
 	addClientLimitFlags(cmd, &sizeLimits)
+	cmd.Flags().StringVar(&lockfile, "lockfile", "", "a path to .lock.json file (e.g. produced by apko lock) that constraints versions of packages to the listed ones (default '' means no additional constraints)")
 
 	return cmd
 }