diff --git a/scripts/images/deepflow-frontend/Dockerfile b/scripts/images/deepflow-frontend/Dockerfile
index fcb20f3..3273921 100644
--- a/scripts/images/deepflow-frontend/Dockerfile
+++ b/scripts/images/deepflow-frontend/Dockerfile
@@ -12,9 +12,11 @@ WORKDIR /app
 COPY deepflow/web/ ./
 
 # Install dependencies based on the preferred package manager
+# pnpm 版本必须与 package.json 的 packageManager (pnpm@10.6.5) 一致，
+# 否则 pnpm >=10.13 的 engine identity 校验会报 ERR_PNPM_PNPM_ENGINE_IDENTITY_UNVERIFIABLE
 RUN if [ -f yarn.lock ]; then yarn --frozen-lockfile; \
     elif [ -f package-lock.json ]; then npm ci; \
-    elif [ -f pnpm-lock.yaml ]; then npm install -g pnpm && pnpm i; \
+    elif [ -f pnpm-lock.yaml ]; then npm install -g pnpm@10.6.5 && pnpm i --frozen-lockfile; \
     else echo "Lockfile not found." && exit 1; \
     fi
 
@@ -40,7 +42,7 @@ ENV NEXT_TELEMETRY_DISABLED=1
 
 RUN if [ -f yarn.lock ]; then SKIP_ENV_VALIDATION=1 yarn build; \
     elif [ -f package-lock.json ]; then SKIP_ENV_VALIDATION=1 npm run build; \
-    elif [ -f pnpm-lock.yaml ]; then npm install -g pnpm && SKIP_ENV_VALIDATION=1 pnpm run build; \
+    elif [ -f pnpm-lock.yaml ]; then npm install -g pnpm@10.6.5 && SKIP_ENV_VALIDATION=1 pnpm run build; \
     else echo "Lockfile not found." && exit 1; \
     fi