I don't think a single
validate.sh is going to work for all repos. Each repo is going to have slightly different validations, and different gometalinter thresholds.
At the very least the
gometalinter.json has to be in the repo itself not bundled with the other validation.
Things like checking generated code, and config files are very specific to a repo.
I think an image or package that handles all the vendor validation sounds good. It can be a self contained unit that is used the same way in every repo.
I don't really agree that
vndr is the wrong place for this check. If LK4D4 doesn't want to support it that's fine. Maybe we can fork and add the check, or create a go tool that imports vndr and does both?
gometalinter is already a well defined tool, we just add a config from the repo.
With a vendor checking tool we should be set for most repos. We can add other custom stuff as necessary in the repo that uses it.