From 801f95834d63baacf694bf662c33c5fa13a393b3 Mon Sep 17 00:00:00 2001 From: David Ahmann Date: Wed, 18 Feb 2026 07:20:58 -0500 Subject: [PATCH] build: pin tool installs in make tools --- Makefile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Makefile b/Makefile index 890a1aa702..151eec6af2 100644 --- a/Makefile +++ b/Makefile @@ -377,7 +377,10 @@ check-node-version: .PHONY: tools tools: ## Install build-time tools from tools.go @echo "Installing build tools..." - @grep _ tools.go | awk -F'"' '{print $$2}' | xargs -tI % go install % + @go install github.com/rhysd/actionlint/cmd/actionlint@v1.7.11 + @go install github.com/securego/gosec/v2/cmd/gosec@v2.23.0 + @go install golang.org/x/tools/gopls@v0.21.1 + @go install golang.org/x/vuln/cmd/govulncheck@v1.1.4 @echo "✓ Tools installed successfully" # Install golangci-lint binary (avoiding GPL dependencies in go.mod)