I come from Node environment, where we have package.json to deal with dependencies. In Go we have go.mod, which is great, but some tools ask us to install their binaries globally instead of setting as a dependency of my project, such as golangci-lint. In Node, for example, we have eslint, which is installed automatically for us when we ask to install or dependencies.
What bothers me is when someone clones my project or I'm in a CI/CD environment, they have to manually install those dependencies.
What's the best practice to deal with tools like golangci-lint? Am I doing something wrong?