ersteller-workflow-tools/README.md

15 lines
612 B
Markdown

# Vendored development tools
`make setup` uses the Linux amd64/arm64 binaries in `tools/bin/` instead of downloading tools.
Versions are pinned in the top-level `Makefile`:
- golangci-lint v2.12.2
- lefthook v2.1.6
- gitleaks v8.30.1
- govulncheck v1.3.0
- deadcode v0.31.0
`golangci-lint`, `lefthook`, and `gitleaks` are copied from their upstream release archives. `govulncheck` and `deadcode` are built from the pinned Go module versions. SHA-256 hashes are in `tools/SHASUMS256.txt`.
These binaries are intended to be tracked through Git LFS via the repository `.gitattributes` rule for `tools/bin/**`.