vendor deps

Gopkg.toml

@@ -0,0 +1,26 @@
+
+# Gopkg.toml example
+#
+# Refer to https://github.com/golang/dep/blob/master/docs/Gopkg.toml.md
+# for detailed Gopkg.toml documentation.
+#
+# required = ["github.com/user/thing/cmd/thing"]
+# ignored = ["github.com/user/project/pkgX", "bitbucket.org/user/project/pkgA/pkgY"]
+#
+# [[constraint]]
+#   name = "github.com/user/project"
+#   version = "1.0.0"
+#
+# [[constraint]]
+#   name = "github.com/user/project2"
+#   branch = "dev"
+#   source = "github.com/myfork/project2"
+#
+# [[override]]
+#  name = "github.com/x/y"
+#  version = "2.4.0"
+
+
+[[constraint]]
+  name = "github.com/hashicorp/vault"
+  version = "0.9.1"

README.md

@@ -50,6 +50,10 @@ Note: It's recommended that you now delete `secrets.json` if you don't need it.
 
 This tool reads all the `VAULT_*` environment variables as the vault cli does. You likely need to specify those for the address, CA certs, etc.
 
+## Dependencies
+
+I use [golang/dep](https://github.com/golang/dep) for managing the `vendor/` directory. I like to run `dep ensure && dep prune` to keep the tree small.
+
 ## Releases
 
 There are various makefile commands for building parts of the release `make release` builds and pushes everything.