diff --git a/tests/test_dependency_and_env_policy.py b/tests/test_dependency_and_env_policy.py
index 0f54bdb0..fa92ad4c 100644
--- a/tests/test_dependency_and_env_policy.py
+++ b/tests/test_dependency_and_env_policy.py
@@ -24,11 +24,11 @@ def test_python_dependency_builds_use_lock_files() -> None:
 
     dockerfile = (ROOT / "Dockerfile").read_text(encoding="utf-8")
     assert "COPY requirements.lock ." in dockerfile
-    assert "pip install --prefer-binary -r requirements.lock" in dockerfile
+    assert "pip install --prefer-binary --extra-index-url https://download.pytorch.org/whl/cpu -r requirements.lock" in dockerfile
     assert "pip install --prefer-binary -r requirements.txt" not in dockerfile
 
     ci = (ROOT / ".github" / "workflows" / "ci.yml").read_text(encoding="utf-8")
-    assert "pip install -r requirements.lock -r requirements-dev.lock" in ci
+    assert "pip install --extra-index-url https://download.pytorch.org/whl/cpu -r requirements.lock -r requirements-dev.lock" in ci
     assert "pip install -r requirements.txt -r requirements-dev.txt" not in ci
 
 
diff --git a/web/core.py b/web/core.py
index b226c4d6..5f2aa789 100644
--- a/web/core.py
+++ b/web/core.py
@@ -110,8 +110,8 @@ _PROJECT_ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 # ---------------------------------------------------------------------------
 # Middleware — imported from web.middleware.http
 # ---------------------------------------------------------------------------
-from web.middleware.http import metrics_middleware as _metrics_middleware
-from web.middleware.http import etag_middleware as _etag_middleware
+from web.middleware.http import metrics_middleware as _metrics_middleware  # noqa: E402
+from web.middleware.http import etag_middleware as _etag_middleware  # noqa: E402
 
 app.middleware("http")(_metrics_middleware)
 app.middleware("http")(_etag_middleware)