ersteller-workflow-tools/README.md

# Vendored development tools

`make setup` uses the Linux amd64/arm64 binaries in `tools/bin/` instead of downloading tools.

These are the versions:

- golangci-lint v2.12.2
- lefthook v2.1.6
- gitleaks v8.30.1
- govulncheck v1.3.0
- deadcode v0.31.0

`golangci-lint`, `lefthook`, and `gitleaks` are copied from their upstream release archives. `govulncheck` and `deadcode` are built from the pinned Go module versions. SHA-256 hashes are in `tools/SHASUMS256.txt`.

These binaries are intended to be tracked through Git LFS via the repository `.gitattributes` rule for `tools/bin/**`.
Vendor setup tool binaries 2026-05-27 08:06:17 +00:00			`# Vendored development tools`

			`make setup` uses the Linux amd64/arm64 binaries in `tools/bin/` instead of downloading tools.

Update README 2026-05-27 08:20:57 +00:00			`These are the versions:`
Vendor setup tool binaries 2026-05-27 08:06:17 +00:00
			`- golangci-lint v2.12.2`
			`- lefthook v2.1.6`
			`- gitleaks v8.30.1`
			`- govulncheck v1.3.0`
			`- deadcode v0.31.0`

			`golangci-lint`, `lefthook`, and `gitleaks` are copied from their upstream release archives. `govulncheck` and `deadcode` are built from the pinned Go module versions. SHA-256 hashes are in `tools/SHASUMS256.txt`.

			These binaries are intended to be tracked through Git LFS via the repository `.gitattributes` rule for `tools/bin/**`.