diff --git a/pkg/downloader/manager.go b/pkg/downloader/manager.go index 812997ea7..f1dea342f 100644 --- a/pkg/downloader/manager.go +++ b/pkg/downloader/manager.go @@ -78,6 +78,11 @@ func (m *Manager) Build() error { return m.Update() } + req := c.Metadata.Dependencies + if sum, err := resolver.HashReq(req); err != nil || sum != lock.Digest { + return errors.New("Chart.lock is out of sync with Chart.yaml") + } + // Check that all of the repos we're dependent on actually exist. if err := m.hasAllRepos(lock.Dependencies); err != nil { return err