# atmos version track lock

Resolve each entry's `desired` expression to a concrete version and write `versions.lock.yaml`. `lock` resolves desired versions as-is; use [`update`](/cli/commands/version/track/update) to advance existing locks within policy.

When an entry's effective policy sets `pin: digest` or `pin: sha`, locking also resolves the immutable identifier: a git commit SHA for GitHub datasources or a `sha256:` manifest digest for OCI registries.

## Usage

```shell
atmos version track lock [track] [flags]
```

## Flags

- **`--group`**
  Limit locking to entries in the named version group.

## Examples

```shell
# Bootstrap the lock file for the prod track
atmos version track lock prod

# Re-resolve only the infrastructure group
atmos version track lock prod --group=infrastructure
```