Harden go dev tools#110
Conversation
|
not related to your change, but important gap: |
| @@ -14,50 +14,242 @@ require ( | |||
| ) | |||
|
|
|||
| require ( | |||
There was a problem hiding this comment.
I kind of like the idea in the article of keeping tool dependencies in a separate modfile from core dependencies to avoid bloating our "main" go.mod, and it doesn't sound like a big lift: https://www.alexedwards.net/blog/how-to-manage-tool-dependencies-in-go-1.24-plus#using-a-separate-modfile-for-tools
Not critical though, we could still ship this as-is (I know you're jumping thru a dozen different repos right now)
There was a problem hiding this comment.
Yeah unfortunately this is like the fourth golang repo I've done already and I don't feel like going back and plumbing that into all the other ones 😛
There was a problem hiding this comment.
yeah I figured - we can adjust case-by-case if it becomes annoying when changing deps in the future
Wow nice catch. |
| @@ -14,50 +14,242 @@ require ( | |||
| ) | |||
|
|
|||
| require ( | |||
There was a problem hiding this comment.
yeah I figured - we can adjust case-by-case if it becomes annoying when changing deps in the future
2 participants
Same as OpsLevel/opslevel-go#616.