diff --git a/lib/workers/branch/lerna.js b/lib/workers/branch/lerna.js
index 29ccfff9f688fdab614395261eed49c142d3277b..b4f85b864f626d226079a384b5a5ff2a8ef3aea3 100644
--- a/lib/workers/branch/lerna.js
+++ b/lib/workers/branch/lerna.js
@@ -23,7 +23,7 @@ async function generateLockFiles(manager, tmpDir, env) {
     logger.debug('Using lerna version ' + lernaVersion);
     const params =
       manager === 'npm'
-        ? '--ignore-scripts'
+        ? '--package-lock-only'
         : '--ignore-scripts --ignore-engines --ignore-platform --mutex network:31879';
     const cmd = `${manager} install ${params} && npx lerna@${lernaVersion} bootstrap -- ${params}`;
     logger.debug({ cmd });
diff --git a/lib/workers/branch/npm.js b/lib/workers/branch/npm.js
index 5875fc31bef6a3db7b59bbcaef4d06a2fb3a28c3..4ce710ca4a59207b7a95bc3290db5b961813644a 100644
--- a/lib/workers/branch/npm.js
+++ b/lib/workers/branch/npm.js
@@ -53,7 +53,7 @@ async function generateLockFile(tmpDir, env) {
       }
     }
     logger.debug(`Using npm: ${cmd}`);
-    cmd = `ls -l && ${cmd} --version && ${cmd} install --ignore-scripts`;
+    cmd = `ls -l && ${cmd} --version && ${cmd} install --package-lock-only`;
     // TODO: Switch to native util.promisify once using only node 8
     ({ stdout, stderr } = await exec(cmd, {
       cwd: tmpDir,