Lockfile Integrity

---
name: lockfile-integrity
description: "Script gate (commit, agent write, CI) over npm, yarn, pnpm, bun, poetry, uv, Pipfile, Cargo, go.sum, Gemfile, composer and NuGet locks. Blocks: source off the registry list or not https, missing hash, hash changed for a locked version, unpinned git source, unreadable lock. Asks: SHA-1-only hash, transitive install script, lock or manifest moved alone, go.sum lines removed, lock ignored or deleted. Judges what a change adds. Friction, not a security boundary."
metadata:
  chock.artifact: hook
  chock.enforcement: block
  chock.coverage_without_chock: advisory
---

# Lockfile Integrity

Script gate (commit, agent write, CI) over npm, yarn, pnpm, bun, poetry, uv, Pipfile, Cargo, go.sum, Gemfile, composer and NuGet locks. Blocks: source off the registry list or not https, missing hash, hash changed for a locked version, unpinned git source, unreadable lock. Asks: SHA-1-only hash, transitive install script, lock or manifest moved alone, go.sum lines removed, lock ignored or deleted. Judges what a change adds. Friction, not a security boundary.

```
on(commit|tool_use): block(script) paths=[pP][aA][cC][kK][aA][gG][eE]-[lL][oO][cC][kK].[jJ][sS][oO][nN]|*/[pP][aA][cC][kK][aA][gG][eE]-[lL][oO][cC][kK].[jJ][sS][oO][nN]|[nN][pP][mM]-[sS][hH][rR][iI][nN][kK][wW][rR][aA][pP].[jJ][sS][oO][nN]|*/[nN][pP][mM]-[sS][hH][rR][iI][nN][kK][wW][rR][aA][pP].[jJ][sS][oO][nN]|[yY][aA][rR][nN].[lL][oO][cC][kK]|*/[yY][aA][rR][nN].[lL][oO][cC][kK]|[pP][nN][pP][mM]-[lL][oO][cC][kK].[yY][aA][mM][lL]|*/[pP][nN][pP][mM]-[lL][oO][cC][kK].[yY][aA][mM][lL]|[bB][uU][nN].[lL][oO][cC][kK]|*/[bB][uU][nN].[lL][oO][cC][kK]|[pP][oO][eE][tT][rR][yY].[lL][oO][cC][kK]|*/[pP][oO][eE][tT][rR][yY].[lL][oO][cC][kK]|[uU][vV].[lL][oO][cC][kK]|*/[uU][vV].[lL][oO][cC][kK]|[pP][iI][pP][fF][iI][lL][eE].[lL][oO][cC][kK]|*/[pP][iI][pP][fF][iI][lL][eE].[lL][oO][cC][kK]|[cC][aA][rR][gG][oO].[lL][oO][cC][kK]|*/[cC][aA][rR][gG][oO].[lL][oO][cC][kK]|[gG][oO].[sS][uU][mM]|*/[gG][oO].[sS][uU][mM]|[gG][eE][mM][fF][iI][lL][eE].[lL][oO][cC][kK]|*/[gG][eE][mM][fF][iI][lL][eE].[lL][oO][cC][kK]|[gG][eE][mM][sS].[lL][oO][cC][kK][eE][dD]|*/[gG][eE][mM][sS].[lL][oO][cC][kK][eE][dD]|[cC][oO][mM][pP][oO][sS][eE][rR].[lL][oO][cC][kK]|*/[cC][oO][mM][pP][oO][sS][eE][rR].[lL][oO][cC][kK]|[pP][aA][cC][kK][aA][gG][eE][sS].[lL][oO][cC][kK].[jJ][sS][oO][nN]|*/[pP][aA][cC][kK][aA][gG][eE][sS].[lL][oO][cC][kK].[jJ][sS][oO][nN]|[pP][aA][cC][kK][aA][gG][eE].[jJ][sS][oO][nN]|*/[pP][aA][cC][kK][aA][gG][eE].[jJ][sS][oO][nN]|[pP][nN][pP][mM]-[wW][oO][rR][kK][sS][pP][aA][cC][eE].[yY][aA][mM][lL]|*/[pP][nN][pP][mM]-[wW][oO][rR][kK][sS][pP][aA][cC][eE].[yY][aA][mM][lL]|[pP][yY][pP][rR][oO][jJ][eE][cC][tT].[tT][oO][mM][lL]|*/[pP][yY][pP][rR][oO][jJ][eE][cC][tT].[tT][oO][mM][lL]|[pP][iI][pP][fF][iI][lL][eE]|*/[pP][iI][pP][fF][iI][lL][eE]|[cC][aA][rR][gG][oO].[tT][oO][mM][lL]|*/[cC][aA][rR][gG][oO].[tT][oO][mM][lL]|[gG][oO].[mM][oO][dD]|*/[gG][oO].[mM][oO][dD]|[gG][eE][mM][fF][iI][lL][eE]|*/[gG][eE][mM][fF][iI][lL][eE]|[gG][eE][mM][sS].[rR][bB]|*/[gG][eE][mM][sS].[rR][bB]|[cC][oO][mM][pP][oO][sS][eE][rR].[jJ][sS][oO][nN]|*/[cC][oO][mM][pP][oO][sS][eE][rR].[jJ][sS][oO][nN]|[dD][iI][rR][eE][cC][tT][oO][rR][yY].[pP][aA][cC][kK][aA][gG][eE][sS].[pP][rR][oO][pP][sS]|*/[dD][iI][rR][eE][cC][tT][oO][rR][yY].[pP][aA][cC][kK][aA][gG][eE][sS].[pP][rR][oO][pP][sS]|*.[gG][eE][mM][sS][pP][eE][cC]|*.[cC][sS][pP][rR][oO][jJ]|*.[fF][sS][pP][rR][oO][jJ]|*.[vV][bB][pP][rR][oO][jJ]|.gitignore|*/.gitignore|*[rR][eE][gG][iI][sS][tT][rR][yY]-[aA][lL][lL][oO][wW][lL][iI][sS][tT].[tT][xX][tT]* script=lockfile-integrity-gate.py
A lockfile change points a package somewhere other than its registry, drops or replaces its hash, leaves a git source unpinned, or moves the lock without the manifest that explains it. Regenerate the lock with the package manager from the registry (npm install, yarn, pnpm install, poetry lock, uv lock, cargo update -p, go mod tidy, bundle lock, composer update) and commit it with the manifest change. A person who has reviewed a private registry host adds it to .chock/registry-allowlist.txt and commits that first; an agent asks the person and never edits that file or the lock by hand.
```

This skill is advisory: the client reading it has no mechanism to enforce it. The same policy compiled by `chock` blocks at commit, on an agent's file writes and at turn end. See https://github.com/open-coder-ai/chock