locked version vs. missing lock file

[szepeviktor]

My feature title

Would you merge a PR that adds an argument to fail the job when dependencies: locked but the lock file is missing?

Background/problem

I'd like to see that problem in form of a ❌

composer-install/bin/composer_install.sh

Lines 19 to 22 in c49029a

	# If there is no composer.lock file, then use the `update` command.
	if [ -z "${composer_lock}" ]; then
	composer_command="update"
	fi

[ramsey]

Sure thing. As long as it's a configurable argument, I think that's be great.