Fixes go.mod

Signed-off-by: PuneetPunamiya <[email protected]>

hack/tools.go

@@ -1,4 +1,5 @@
 //go:build tools
+// +build tools
 
 /*
 Copyright 2019 The Tekton Authors
@@ -19,13 +20,11 @@ limitations under the License.
 package tools
 
 // This is needed to force "go mod" to vendor these modules, which we only use for scripts.
-import (
-	_ "github.com/tektoncd/plumbing"
-	_ "github.com/tektoncd/plumbing/scripts"
-
-	_ "k8s.io/code-generator/cmd/deepcopy-gen"
-
-	_ "github.com/golangci/golangci-lint/cmd/golangci-lint"
-	_ "github.com/google/addlicense"
-	_ "github.com/google/go-licenses/licenses"
-)
+// import (
+// 	_ "github.com/tektoncd/plumbing"
+// 	_ "github.com/tektoncd/plumbing/scripts"
+
+// 	_ "github.com/google/addlicense"
+// 	_ "github.com/google/go-licenses/licenses"
+// 	_ "k8s.io/code-generator/cmd/deepcopy-gen"
+// )

hack/tools/go.mod

@@ -0,0 +1,37 @@
+module github.com/tektoncd/chains/tools
+
+go 1.23.6
+
+require (
+	github.com/google/addlicense v1.1.1
+	github.com/google/go-licenses v1.6.0
+	github.com/tektoncd/plumbing v0.0.0-20250205144534-00e2ca26d338
+	k8s.io/code-generator v0.32.1
+)
+
+require (
+	github.com/bmatcuk/doublestar/v4 v4.0.2 // indirect
+	github.com/emirpasic/gods v1.12.0 // indirect
+	github.com/go-logr/logr v1.4.2 // indirect
+	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
+	github.com/google/licenseclassifier v0.0.0-20210722185704-3043a050f148 // indirect
+	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
+	github.com/kevinburke/ssh_config v0.0.0-20190725054713-01f96b0aa0cd // indirect
+	github.com/mitchellh/go-homedir v1.1.0 // indirect
+	github.com/sergi/go-diff v1.2.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/src-d/gcfg v1.4.0 // indirect
+	github.com/xanzy/ssh-agent v0.2.1 // indirect
+	go.opencensus.io v0.23.0 // indirect
+	golang.org/x/crypto v0.32.0 // indirect
+	golang.org/x/mod v0.22.0 // indirect
+	golang.org/x/net v0.34.0 // indirect
+	golang.org/x/sync v0.10.0 // indirect
+	golang.org/x/sys v0.29.0 // indirect
+	golang.org/x/tools v0.29.0 // indirect
+	gopkg.in/src-d/go-billy.v4 v4.3.2 // indirect
+	gopkg.in/src-d/go-git.v4 v4.13.1 // indirect
+	gopkg.in/warnings.v0 v0.1.2 // indirect
+	k8s.io/gengo/v2 v2.0.0-20240911193312-2b36238f13e9 // indirect
+	k8s.io/klog/v2 v2.130.1 // indirect
+)

vendor/github.com/ashanbrown/makezero/LICENSE → hack/tools/tools.go

@@ -1,13 +1,30 @@
-Copyright 2019 Andrew Shannon Brown
+//go:build tools
+// +build tools
+
+/*
+Copyright 2025 The Tekton Authors
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 
-    http://www.apache.org/licenses/LICENSE-2.0
+	http://www.apache.org/licenses/LICENSE-2.0
 
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
+*/
+
+package tools
+
+// This is needed to force "go mod" to vendor these modules, which we only use for scripts.
+import (
+	_ "github.com/tektoncd/plumbing"
+	_ "github.com/tektoncd/plumbing/scripts"
+
+	_ "github.com/google/addlicense"
+	_ "github.com/google/go-licenses/licenses"
+	_ "k8s.io/code-generator/cmd/deepcopy-gen"
+)

test/presubmit-tests.sh

@@ -30,7 +30,8 @@ export DISABLE_YAML_LINTING=1
 source "$(git rev-parse --show-toplevel)"/vendor/github.com/tektoncd/plumbing/scripts/presubmit-tests.sh
 
 function post_build_tests() {
-  echo Installing tools from hack/tools.go
+  echo Installing tools from hack/tools/tools.go
+  go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
   go list -f '{{range .Imports}}{{.}} {{end}}' hack/tools.go | xargs go install
 
   header "running golangci-lint"