Snapshot digest, provenance, signature, vulnerability, malware, capability, and ownership evidence for every dependency. Fail CI when that trust state drifts — not just when a version does.
`securock lock` writes a deterministic securock.lock that records what you accepted for each artifact — digests, provenance, signatures, ownership, capabilities, and health. No timestamps, no absolute paths, byte-identical on re-run.
Lockfile format
`diff` shows the operator view of every change at the same version — a different digest, a lost attestation, a new maintainer, a new install script — before anything ships.
diff and verify
`verify` exits 1 on the same drift, so pull requests cannot silently change trust state. Accept changes with `update --write` after review, or wire the whole loop into GitHub Actions.
GitHub Action
npm attestation signatures and PyPI PEP 740 attestations are re-verified against Sigstore roots and bound to the locked digest — alone, or as a minimum floor with the strict profile.
Evidence states
`sast` tracks untrusted data through your own source to dangerous calls across 9 languages, fully offline — plus Dockerfile, Kubernetes, Terraform, and Actions checks and a committed-secrets scan.
SAST reference
`accept` records reviewed findings with reason, approver, and expiry; `vex export` and `sbom export` carry your decisions downstream in OpenVEX, CycloneDX, and SPDX.
Triage and exports