Function EnsureCommand

pkg/toolinstall/resolver.go:26–42

EnsureCommand makes sure a command binary is available. It checks PATH first, then the docker agent tools directory, then attempts to install from the aqua registry if auto-install is enabled. Returns the resolved command (may be the same string if found in PATH, or a full path to the installed bin

(ctx context.Context, command, version string)

// When auto-install is disabled (globally or per-toolset), the original
// command is returned with no error.
func EnsureCommand(ctx context.Context, command, version string) (string, error) {
	if strings.EqualFold(os.Getenv("DOCKER_AGENT_AUTO_INSTALL"), "false") {
		return command, nil
	}

	lower := strings.ToLower(strings.TrimSpace(version))
	if lower == "false" || lower == "off" {
		return command, nil
	}

	resolvedPath, err := resolve(ctx, command, version, doInstall)
	if err != nil {
		return "", fmt.Errorf("auto-installing command %q: %w", command, err)
	}

	return resolvedPath, nil
}

// installGroup deduplicates concurrent installations of the same command.
// If two goroutines call resolve("fzf") simultaneously, only one performs