diff --git a/pkg/codegen/schema/pulumi.json b/pkg/codegen/schema/pulumi.json
index 4c6a6b270054..de56f036fb5d 100644
--- a/pkg/codegen/schema/pulumi.json
+++ b/pkg/codegen/schema/pulumi.json
@@ -68,6 +68,7 @@
                     "format": "regex"
                 }
             },
+            "additionalProperties": false,
             "required": ["moduleFormat"]
         },
         "config": {
@@ -88,7 +89,8 @@
                         "type": "string"
                     }
                 }
-            }
+            },
+            "additionalProperties": false
         },
         "types": {
             "description": "A map from type token to complexTypeSpec that describes the set of complex types (i.e. object, enum) defined by this package.",
@@ -314,6 +316,7 @@
                             "type": "object"
                         }
                     },
+                    "additionalProperties": false,
                     "required": ["environment"]
                 },
                 "deprecationMessage": {
@@ -517,7 +520,8 @@
                 },
                 "inputs": {
                     "description": "The bag of input values for the function, if any.",
-                    "$ref": "#/$defs/objectTypeSpec"
+                    "$ref": "#/$defs/objectTypeSpec",
+                    "unevaluatedProperties": false
                 },
                 "multiArgumentInputs": {
                     "description": "A list of parameter names that determines whether the input bag should be treated as a single argument or as multiple arguments. The list corresponds to the order in which the parameters should be passed to the function.",
@@ -528,7 +532,8 @@
                 },
                 "outputs": {
                     "description": "The bag of output values for the function, if any.",
-                    "$ref": "#/$defs/objectTypeSpec"
+                    "$ref": "#/$defs/objectTypeSpec",
+                    "unevaluatedProperties": false
                 },
                 "deprecationMessage": {
                     "description": "Indicates whether the function is deprecated",