internal/

Package checker defines the plugin-shaped interface every built-in scanner adapter implements.

Package cli wires cobra subcommands for the lintel binary.

Package config parses and validates .lintel/lintel.yaml.

Package detect identifies project stacks from manifest files.

Package filter applies allowlist, baseline, warn_paths, and inline-ignore layers.

Package finding defines the normalized result type every scanner collapses into.

Package gate decides which findings are blocking based on mode + severity + filter layers (allowlist, baseline, warn_paths, inline ignores).

Package hook installs and removes Lintel git hook stubs.

Package installer downloads, verifies, and installs pinned scanner binaries into ~/.lintel/bin.

Package report turns findings into output bytes.

Package resolve locates scanner binaries and verifies them against sha256 hashes.

Package runner executes checkers concurrently under timeout and parallelism bounds.

Package version exposes build-time metadata.