Awesome Reviewers

Verification · Supply chain · Lockfile consistency

Lock check

Regenerate the lock and fail on any diff.

How to build it

  1. Add a CI step that regenerates the lock file in check mode.
  2. Fail the step on any difference from the committed lock file.
  3. Print the diff in the job log so the fix is clear.

Signals in a repository

  • A workflow step running uv lock --check.
  • A CI step that regenerates the lock and runs git diff --exit-code on it.
  • A lock check step that runs before the install step.

In practice

16 repositories run a tool for this check in the scanned set.

  • uv-lock · 16 repos

Examples