installtools

Documentation

Overview

Command installtools installs the development tools pinned in tools/versions.env into .tools/bin.

golangci-lint and gremlins are built from verified upstream modules with reviewed source patches, preserving upstream dependency files. GoReleaser comes from an official archive whose digest and, when GitHub CLI is available, immutable-release attestation are checked. govulncheck and actionlint publish no attested archives, so they are built from source with `go install`, which verifies every module against the Go checksum database.