Skip to content

Add Lockfile Support for Reproducible Builds #59

@spboyer

Description

@spboyer

Description

Support lockfiles (poetry.lock, Pipfile.lock, uv.lock) for reproducible builds.

Current State

Reads requirements.txt and pyproject.toml but doesn't respect lockfiles.

Proposed Implementation

  • Auto-detect lockfile presence
  • Parse and use locked versions
  • Support Poetry, Pipenv, PDM, and uv lockfiles
  • Validate lockfile sync with pyproject.toml

Use Cases

  • Reproducible builds across environments
  • Consistent dependency versions
  • Security and compliance requirements

Priority

High - Essential for production deployments.

Parent: #48

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions