Hamburger Cross Icon
PHP Project Guardrails - Composer Lock Exists

Composer Lock Exists

✓ Guardrail PHP Project Guardrails Beta Devex Build And Ci
php.composer-lock-exists

Ensures the project has a composer.lock file for reproducible builds. Reads from .lang.php.composer.lock_exists.

composer.lock dependencies reproducibility
Get Started View All PHP Project Guardrails

Compatible Integrations

This guardrail works with the following integrations. Click to see how to use Composer Lock Exists with each collector.

+
Composer Lock Exists + PHP Collector Provides PHP project metadata
→

Enable This Guardrail

Add the parent policy to your lunar-config.yml to enable this guardrail.

📄 lunar-config.yml 
policies:
  - uses: github://earthly/lunar-lib/policies/php@v1.0.0
    include: [composer-lock-exists]
    # with: ...

How This Guardrail Works

This guardrail is part of the PHP Project Guardrails policy. It evaluates data collected by integrations and produces a pass/fail check with actionable feedback.

When enabled, this check runs automatically on every PR and in AI coding workflows, providing real-time enforcement of your engineering standards.

Learn How Lunar Works →
1
↓ Integrations Gather Data
Collectors extract metadata from code, CI pipelines, tool outputs, and scans
2
{ } Centralized as JSON
All data merged into each component's unified metadata document
3
✓ This Guardrail Checks Current
Composer Lock Exists runs and provides pass/fail feedback

Configuration Options

These inputs can be configured in your lunar-config.yml to customize how the parent policy (and this guardrail) behaves.

Input Required Default Description
min_version Optional 8.1 Minimum required PHP version (e.g., "8.1", "8.2")
min_version_cicd Optional 8.1 Minimum required PHP CI runtime version (e.g., "8.1", "8.2")
min_composer_version Optional 2.6 Minimum required Composer version (e.g., "2.6", "2.7")

Related Guardrails

Other guardrails in the PHP Project Guardrails policy.

Guardrail Devex Build And Ci
Composer Json Exists

Ensures the project has a composer.json file for dependency management. Reads from .lang.php.composer.json_exists.
Guardrail Devex Build And Ci
Phpunit Configured

Ensures a test framework (PHPUnit) is configured for the project. Testing is essential for maintaining code quality.
Guardrail Devex Build And Ci
Static Analysis Configured

Ensures a static analysis tool (PHPStan or Psalm) is configured. Static analysis catches bugs and type errors before...
Guardrail Devex Build And Ci
Code Style Configured

Ensures a code style tool (PHP-CS-Fixer or PHP_CodeSniffer) is configured. Consistent code style reduces cognitive load...
Guardrail Devex Build And Ci
Min Version

Ensures the project requires at least the minimum PHP version. Helps maintain security and compatibility standards.
Guardrail Devex Build And Ci
Min Version Cicd

Ensures the PHP runtime version observed in CI meets the minimum required version. Reads from .lang.php.cicd.cmds...
View all 8 guardrails in PHP Project Guardrails →
PHP Project Guardrails

PHP Project Guardrails

This guardrail is part of the PHP Project Guardrails policy, which includes 8 guardrails for devex build and ci.

View Policy

Ready to Automate Your Standards?

See how Lunar can turn your engineering wiki, compliance docs, or postmortem action items into automated guardrails with our 100+ built-in guardrails.

Works with any process
check Infrastructure conventions
check Post-mortem action items
check Security & compliance policies
check Testing & quality requirements
Automate Now
Turn any process doc into guardrails
Book a Demo