`autonomy oci pull-lock`¶

Retrieve the autonomy.lock.json attached to an OCI image

Synopsis¶

Pulls the lock artifact attached to --image and writes it to --out.

Uses the same strategy as attach-lock (referrers or sidecar), determined by
the cached registry capability probe.

Usage¶

autonomy oci pull-lock [flags]

Options¶

      --image string   OCI image reference (required)
      --out string     output path for the pulled lock file (default "autonomy.lock.json")

Options inherited from parent commands¶

      --require-signed-manifest   Refuse to start if the SHA256SUMS release manifest or its cosign signature is missing/invalid (Tier 2 binary-integrity check; default: build-time compile-in via -ldflags -X, build-hardened artifacts=true, all others=false)

See also¶

autonomy oci — Manage OCI artifact attachments (lock, policy bundle)