Forcing firmware version from CLI

From what I understand, if I want to enforce a specific version of firmware with my builds, that can only be done from the web build, not from the CLI. Is that correct? Are there plans to allow a firmware version to be locked from the CLI? I prefer working from local repositories, but as we move to release products, we’re going to need to maintain some version control of our builds. Is that an issue others are foreseeing?