ersteller-workflow-tools/README.md

612 B

Vendored development tools

make setup uses the Linux amd64/arm64 binaries in tools/bin/ instead of downloading tools.

Versions are pinned in the top-level Makefile:

  • golangci-lint v2.12.2
  • lefthook v2.1.6
  • gitleaks v8.30.1
  • govulncheck v1.3.0
  • deadcode v0.31.0

golangci-lint, lefthook, and gitleaks are copied from their upstream release archives. govulncheck and deadcode are built from the pinned Go module versions. SHA-256 hashes are in tools/SHASUMS256.txt.

These binaries are intended to be tracked through Git LFS via the repository .gitattributes rule for tools/bin/**.