Avoid using curl downloads because of the Supply Chain attacks.

[naveensrinivasan]

Avoid using curl downloads because of the Supply Chain attacks.

https://github.com/btcsuite/btcd/blob/31791ba4dc6ef913b1e8eb7bfb6746b1a118e405/.github/workflows/go.yml#L21

Example https://blog.gitguardian.com/codecov-supply-chain-breach/

Possible Solution

• Use golang ci as go dependency in a separate go.mod with something like // +build tools https://github.com/ossf/scorecard/blob/main/tools/tools.go
• Use GitHub action https://github.com/golangci/golangci-lint-action

[vpereira01]

curl download removed with #1785 This issue can be closed IMHO.