diff --git a/terragrunt/live/website/terragrunt.hcl b/terragrunt/live/website/terragrunt.hcl
index 8e36c41..451596c 100644
--- a/terragrunt/live/website/terragrunt.hcl
+++ b/terragrunt/live/website/terragrunt.hcl
@@ -3,6 +3,15 @@ include "root" {
 }
 
 terraform {
+  # Prevent OpenTofu/Terraform from generating a .terraform.lock.hcl file
+  # inside the live Terragrunt directory. Live folders do not own provider
+  # versions — the module lockfile in terraform/website/ is the single
+  # source of truth. Without this flag, `terragrunt init` would create a
+  # local lockfile here, causing CI to detect uncommitted changes.
+  extra_arguments "disable_lockfile" {
+    commands = ["init"]
+    arguments = ["-lockfile=readonly"]
+  }
   source = "../../../terraform/website/"
 }