flog lock

Create or deliberately reconcile flog.lock without installing dependencies.

Usage#

flog lock [options]

Examples#

flog lock
flog lock --target linux/x64/glibc --target darwin/arm64
flog lock --force
flog lock --json

Options and behaviour#

Resolution is network-aware and distinct from installation. Review and commit the resulting lock. Repeat --target <os/cpu[/libc]> to lock additional targets; --cwd and --json are also supported. Before writing a changed lock, Flog checks every proposed target for registry advisories. Retained affected exact versions are warned; newly affected versions block the write. --force explicitly accepts complete known findings, but cannot bypass incomplete advisory coverage.

Run flog help lock for complete current help.

Related#

Lockfiles and resolution · Vulnerability audit policy · Install