atmos vendor verify
Compare every lock-owned file on disk against its recorded vendor.lock.yaml receipt. Report
drift — missing files, or files whose contents no longer match what was last vendored. Exits
non-zero when any drift is found, for use in CI.
Usage
atmos vendor verify [--component <name>] [--format table|json]
This never checks for a newer version upstream — see
atmos vendor update --check for that. The vendor verify command is purely a read-only, on-disk integrity check against what's already recorded in
the lock file: it never fetches, writes, or modifies anything.
Examples
# Verify every vendored artifact.
atmos vendor verify
# Verify only one component.
atmos vendor verify --component vpc
# Machine-readable output for CI.
atmos vendor verify --format json
Flags
--component/-c(string)- Verify only this component. Omit to verify every artifact recorded in the lock file.
--format(string, defaulttable)- Output format:
tableorjson.
The atmos vendor verify command reports drift; it never fixes it. Re-run
atmos vendor pull --refresh-lock (or atmos vendor pull --component <name> --refresh-lock for a
single component) to re-fetch and reconcile drifted sources. Or run
atmos vendor clean to remove lock-owned files
outright.