# atmos vendor verify

Compare every lock-owned file on disk against its recorded `vendor.lock.yaml` receipt. Report
drift — missing files, or files whose contents no longer match what was last vendored. Exits
non-zero when any drift is found, for use in CI.

## Usage

```shell
atmos vendor verify [--component <name>] [--format table|json]
```

This never checks for a newer version upstream — see
`atmos vendor update --check` for that. The `vendor
verify` command is purely a read-only, on-disk integrity check against what's already recorded in
the lock file: it never fetches, writes, or modifies anything.

## Examples

```shell
# Verify every vendored artifact.
atmos vendor verify

# Verify only one component.
atmos vendor verify --component vpc

# Machine-readable output for CI.
atmos vendor verify --format json
```

## Flags

- **`--component` / `-c` (string)**
  Verify only this component. Omit to verify every artifact recorded in the lock file.
- **`--format` (string, default `table`)**
  Output format: 
  `table`
   or 
  `json`
  .

:::note
The `atmos vendor verify` command reports drift; it never fixes it. Re-run
`atmos vendor pull --refresh-lock` (or `atmos vendor pull --component <name> --refresh-lock` for a
single component) to re-fetch and reconcile drifted sources. Or run
`atmos vendor clean` to remove lock-owned files
outright.
:::