Skip to main content

atmos vendor verify

Compare every lock-owned file on disk against its recorded vendor.lock.yaml receipt. Report drift — missing files, or files whose contents no longer match what was last vendored. Exits non-zero when any drift is found, for use in CI.

Usage

atmos vendor verify [--component <name>] [--format table|json]

This never checks for a newer version upstream — see atmos vendor update --check for that. The vendor verify command is purely a read-only, on-disk integrity check against what's already recorded in the lock file: it never fetches, writes, or modifies anything.

Examples

# Verify every vendored artifact.
atmos vendor verify

# Verify only one component.
atmos vendor verify --component vpc

# Machine-readable output for CI.
atmos vendor verify --format json

Flags

--component / -c (string)
Verify only this component. Omit to verify every artifact recorded in the lock file.
--format (string, default table)
Output format: table or json.
note

The atmos vendor verify command reports drift; it never fixes it. Re-run atmos vendor pull --refresh-lock (or atmos vendor pull --component <name> --refresh-lock for a single component) to re-fetch and reconcile drifted sources. Or run atmos vendor clean to remove lock-owned files outright.