imagelock

Overview ¶

Command imagelock generates and checks internal/compose/images.lock.json.

Purpose: ADR 0030 / contract:cli.image-lock v1. images.yaml is authored; the lock is generated from it (and optionally from the plugins repo's images.json) and embedded in the binary.

imagelock -resolve [-plugins images.json]   network: rewrite the lock
imagelock -check                            offline: verify the lock

Inputs: -yaml (default internal/compose/images.yaml), -lock (default internal/compose/images.lock.json), -plugins (plugins images.json v1). Outputs: the lock file (-resolve) or problems on stderr with exit 1 (-check). Constraints: run from the cli repository root; no Go registry client (the docker CLI does the reads, through internal/docker).