# Vendored development tools

`make setup` uses the Linux amd64/arm64 binaries in `tools/bin/` instead of downloading tools.

Versions are pinned in the top-level `Makefile`:

- golangci-lint v2.12.2
- lefthook v2.1.6
- gitleaks v8.30.1
- govulncheck v1.3.0
- deadcode v0.31.0

`golangci-lint`, `lefthook`, and `gitleaks` are copied from their upstream release archives. `govulncheck` and `deadcode` are built from the pinned Go module versions. SHA-256 hashes are in `tools/SHASUMS256.txt`.

These binaries are intended to be tracked through Git LFS via the repository `.gitattributes` rule for `tools/bin/**`.