diff --git a/Changelog.md b/Changelog.md
index e728857f8..8e1ec7360 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -17,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * Add Python metadata support for `license-file` field of `Cargo.toml` in [#1195](https://github.com/PyO3/maturin/pull/1195)
 * Upgrade to clap 4.0 in [#1197](https://github.com/PyO3/maturin/pull/1197). This bumps MSRV to 1.61.0.
 * Fix macOS `LC_ID_DYLIB` for abi3 wheels in [#1208](https://github.com/PyO3/maturin/pull/1208)
+* Pass `--locked` to Cargo when bootstrap from sdist in [#1212](https://github.com/PyO3/maturin/pull/1212)
 
 ## [0.13.6] - 2022-10-08
 
diff --git a/setup.py b/setup.py
index 1c1525858..d891a5b69 100644
--- a/setup.py
+++ b/setup.py
@@ -44,7 +44,7 @@ def finalize_options(self):
 with open("Cargo.toml", "rb") as fp:
     version = tomllib.load(fp)["package"]["version"]
 
-cargo_args = []
+cargo_args = ["--locked"]
 if platform.machine() in (
     "mips",
     "mips64",
@@ -74,7 +74,9 @@ def finalize_options(self):
     python_requires=">=3.7",
     cmdclass={"bdist_wheel": bdist_wheel},
     packages=["maturin"],
-    rust_extensions=[RustBin("maturin", args=cargo_args)],
+    rust_extensions=[
+        RustBin("maturin", args=cargo_args, cargo_manifest_args=["--locked"])
+    ],
     classifiers=[
         "Topic :: Software Development :: Build Tools",
         "Programming Language :: Rust",