3 ms·

Would the vendor management support deterministic builds?

• ereyes01 10y ago
  Yes, that is the purpose of the vendor directory. You copy the source of each of your dependencies into vendor/ and commit it to your own source control so it can't change unless you do so yourself. I personally use git submodules to manage the contents of the vendor/ tree, but the go compiler/toolchain itself doesn't really care how you get the files into there. Edit: other comments below have mentioned some of the tools available to manage your vendor/ tree. Using git submodules manually can be crude, especially when adding dependencies that themselves have other dependencies.
• aj0strow 10y ago
  Yes. I check my vendor into git, so it's as deterministic as source code.