sergio/takana

k8s (stern/kail/popeye/kube-score/kubeconform/kubent/polaris-no/kube-capacity/vals/helmsman),
recon projectdiscovery+tomnomnom (subfinder/naabu/katana/nuclei/gau/waybackurls/gobuster/ffuf/anew/
qsreplace/unfurl), dev (golangci-lint/gofumpt/gci/gotests/mockgen/golines/buf/bazelisk/act/gojq/sq),
security (gosec/nancy/osv-scanner/scorecard/kics/gitsign), git (git-lfs/hub/gitbatch/gotop/gh-dash),
OCI (umoci), inlets, dyff. Misimports dropeados: gf(C)/polaris(rust)/gitlab-runner+traefik(tarball).

diff --git a/recipes/incoming-go/act.toml b/recipes/incoming-go/act.toml
new file mode 100644
index 00000000..aab3eee0
--- /dev/null
+++ b/recipes/incoming-go/act.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "act"
+version = "0.2.89"
+
+[source]
+repo   = "https://github.com/nektos/act"
+commit = "4f411281417e88660bea1c1a1749aa71ae0bd60f"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/bazelisk.toml b/recipes/incoming-go/bazelisk.toml
new file mode 100644
index 00000000..19c82169
--- /dev/null
+++ b/recipes/incoming-go/bazelisk.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "bazelisk"
+version = "1.28.1"
+
+[source]
+repo   = "https://github.com/bazelbuild/bazelisk"
+commit = "1e6aaf11d51e83ec8d18e66b461f49d4b7877321"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/buf.toml b/recipes/incoming-go/buf.toml
new file mode 100644
index 00000000..53b1b396
--- /dev/null
+++ b/recipes/incoming-go/buf.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "buf"
+version = "1.70.0"
+
+[source]
+repo   = "https://github.com/bufbuild/buf"
+commit = "4f657db175eb7418efef85b35db97472ff9df526"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go, git, protobuf
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/dyff.toml b/recipes/incoming-go/dyff.toml
new file mode 100644
index 00000000..d60d72d2
--- /dev/null
+++ b/recipes/incoming-go/dyff.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "dyff"
+version = "1.12.0"
+
+[source]
+repo   = "https://github.com/homeport/dyff"
+commit = "ea5d770b575967f1bc21eefcae08712d8f755e04"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/ffuf.toml b/recipes/incoming-go/ffuf.toml
new file mode 100644
index 00000000..f6498c9e
--- /dev/null
+++ b/recipes/incoming-go/ffuf.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "ffuf"
+version = "2.1.0"
+
+[source]
+repo   = "https://github.com/ffuf/ffuf"
+commit = "7a2756a8f367c69c261544ae83d52e86b1ca52d0"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gau.toml b/recipes/incoming-go/gau.toml
new file mode 100644
index 00000000..c7e4697a
--- /dev/null
+++ b/recipes/incoming-go/gau.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gau"
+version = "2.2.4"
+
+[source]
+repo   = "https://github.com/lc/gau"
+commit = "5d4e1270e632732756fe98717520c43c86e8bd18"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gci.toml b/recipes/incoming-go/gci.toml
new file mode 100644
index 00000000..b190c347
--- /dev/null
+++ b/recipes/incoming-go/gci.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gci"
+version = "0.14.0"
+
+[source]
+repo   = "https://github.com/daixiang0/gci"
+commit = "ba4e6aab099e64c6ff43942cc7112a1604580b7e"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gh-dash.toml b/recipes/incoming-go/gh-dash.toml
new file mode 100644
index 00000000..90269651
--- /dev/null
+++ b/recipes/incoming-go/gh-dash.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gh-dash"
+version = "4.24.1"
+
+[source]
+repo   = "https://github.com/dlvhdr/gh-dash"
+commit = "6c8868d5e45ea92d1673b3eb84634190a76a39dc"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/git-lfs.toml b/recipes/incoming-go/git-lfs.toml
new file mode 100644
index 00000000..4b7f53c2
--- /dev/null
+++ b/recipes/incoming-go/git-lfs.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "git-lfs"
+version = "3.7.1"
+
+[source]
+repo   = "https://github.com/git-lfs/git-lfs"
+commit = "b84b33847fe6458f36ef521534dc0eac953cb379"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go, asciidoctor, git
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gitbatch.toml b/recipes/incoming-go/gitbatch.toml
new file mode 100644
index 00000000..429e9e57
--- /dev/null
+++ b/recipes/incoming-go/gitbatch.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gitbatch"
+version = "0.6.1"
+
+[source]
+repo   = "https://github.com/isacikgoz/gitbatch"
+commit = "489df9f1b64ac27566b5a4f9c276ecc8c990f23d"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go, git
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gitsign.toml b/recipes/incoming-go/gitsign.toml
new file mode 100644
index 00000000..954de1e9
--- /dev/null
+++ b/recipes/incoming-go/gitsign.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gitsign"
+version = "0.16.1"
+
+[source]
+repo   = "https://github.com/sigstore/gitsign"
+commit = "d5e8a584d0551218fc96b5c89c0db910788b432a"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go, git-minimal
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gobuster.toml b/recipes/incoming-go/gobuster.toml
new file mode 100644
index 00000000..e240864b
--- /dev/null
+++ b/recipes/incoming-go/gobuster.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gobuster"
+version = "3.8.2"
+
+[source]
+repo   = "https://github.com/OJ/gobuster"
+commit = "e8410cad6cacf08b82e2f610055f636f0be61c40"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gofumpt.toml b/recipes/incoming-go/gofumpt.toml
new file mode 100644
index 00000000..abdf36f7
--- /dev/null
+++ b/recipes/incoming-go/gofumpt.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gofumpt"
+version = "0.10.0"
+
+[source]
+repo   = "https://github.com/mvdan/gofumpt"
+commit = "14050252a6d591bb7a3f0167c925c3d6e6f9bdf8"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gojq.toml b/recipes/incoming-go/gojq.toml
new file mode 100644
index 00000000..391e26f5
--- /dev/null
+++ b/recipes/incoming-go/gojq.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gojq"
+version = "0.12.19"
+
+[source]
+repo   = "https://github.com/itchyny/gojq"
+commit = "b7ebffbfc038677520df0bae4c8c2d877f88ffea"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/golangci-lint.toml b/recipes/incoming-go/golangci-lint.toml
new file mode 100644
index 00000000..0108ddea
--- /dev/null
+++ b/recipes/incoming-go/golangci-lint.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "golangci-lint"
+version = "2.12.2"
+
+[source]
+repo   = "https://github.com/golangci/golangci-lint"
+commit = "c0d3ddc9cf3faa61a4e378e879ece580256d76e5"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/golines.toml b/recipes/incoming-go/golines.toml
new file mode 100644
index 00000000..9b5a14ec
--- /dev/null
+++ b/recipes/incoming-go/golines.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "golines"
+version = "0.15.0"
+
+[source]
+repo   = "https://github.com/golangci/golines"
+commit = "cc9f0ad2b81fd56bfa25e971cbc86e6255c03f24"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gosec.toml b/recipes/incoming-go/gosec.toml
new file mode 100644
index 00000000..5c6b1227
--- /dev/null
+++ b/recipes/incoming-go/gosec.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gosec"
+version = "2.27.1"
+
+[source]
+repo   = "https://github.com/securego/gosec"
+commit = "9e6a9843d7a4a6e3e9a8539b02612c8a4aa3f889"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gotests.toml b/recipes/incoming-go/gotests.toml
new file mode 100644
index 00000000..7f7c2102
--- /dev/null
+++ b/recipes/incoming-go/gotests.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gotests"
+version = "1.9.0"
+
+[source]
+repo   = "https://github.com/cweill/gotests"
+commit = "5e8b5b063e1e5de067a2df5cbee427e3bf5426d7"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/gotop.toml b/recipes/incoming-go/gotop.toml
new file mode 100644
index 00000000..9f7799ca
--- /dev/null
+++ b/recipes/incoming-go/gotop.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gotop"
+version = "4.2.0"
+
+[source]
+repo   = "https://github.com/xxxserxxx/gotop"
+commit = "f590a56842e30e61949c23fab30fb10bf76e1410"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/helmsman.toml b/recipes/incoming-go/helmsman.toml
new file mode 100644
index 00000000..c5c2ae78
--- /dev/null
+++ b/recipes/incoming-go/helmsman.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "helmsman"
+version = "4.0.5"
+
+[source]
+repo   = "https://github.com/mkubaczyk/helmsman"
+commit = "f437802099a506dbc4bdef509b1c61884cd0a16c"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/hub.toml b/recipes/incoming-go/hub.toml
new file mode 100644
index 00000000..89463f6e
--- /dev/null
+++ b/recipes/incoming-go/hub.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "hub"
+version = "unstable-2022-12-01"
+
+[source]
+repo   = "https://github.com/github/hub"
+commit = "38bcd4ae469e5f53f01901340b715c7658ab417a"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go, groff, util-linux, git
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/kail.toml b/recipes/incoming-go/kail.toml
new file mode 100644
index 00000000..fa4d0ce3
--- /dev/null
+++ b/recipes/incoming-go/kail.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "kail"
+version = "0.17.4"
+
+[source]
+repo   = "https://github.com/boz/kail"
+commit = "ec131e2d9c752664702f7711a1981ec8ec1f594a"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/katana.toml b/recipes/incoming-go/katana.toml
new file mode 100644
index 00000000..100ff278
--- /dev/null
+++ b/recipes/incoming-go/katana.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "katana"
+version = "1.6.1"
+
+[source]
+repo   = "https://github.com/projectdiscovery/katana"
+commit = "0265c675d03de83b1a1f1935ffb9c8ca9e4c17aa"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/kics.toml b/recipes/incoming-go/kics.toml
new file mode 100644
index 00000000..911d8270
--- /dev/null
+++ b/recipes/incoming-go/kics.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "kics"
+version = "2.1.19"
+
+[source]
+repo   = "https://github.com/Checkmarx/kics"
+commit = "4f798f77f478efb722548dbd50812be00a6dbf6c"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/kube-capacity.toml b/recipes/incoming-go/kube-capacity.toml
new file mode 100644
index 00000000..8e14e39f
--- /dev/null
+++ b/recipes/incoming-go/kube-capacity.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "kube-capacity"
+version = "0.8.0"
+
+[source]
+repo   = "https://github.com/robscott/kube-capacity"
+commit = "7fa39ff17079baf65a09bb4be892c7a6536220fe"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/kube-score.toml b/recipes/incoming-go/kube-score.toml
new file mode 100644
index 00000000..a6f33a26
--- /dev/null
+++ b/recipes/incoming-go/kube-score.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "kube-score"
+version = "1.20.0"
+
+[source]
+repo   = "https://github.com/zegl/kube-score"
+commit = "81371e9f53b633bec69423fc298295bd71bd869a"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/kubeconform.toml b/recipes/incoming-go/kubeconform.toml
new file mode 100644
index 00000000..bfb7f0b9
--- /dev/null
+++ b/recipes/incoming-go/kubeconform.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "kubeconform"
+version = "0.7.0"
+
+[source]
+repo   = "https://github.com/yannh/kubeconform"
+commit = "e65429b1e5990dd019ebb7b5642dcd22a3e9cd13"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/kubent.toml b/recipes/incoming-go/kubent.toml
new file mode 100644
index 00000000..a3f20ea1
--- /dev/null
+++ b/recipes/incoming-go/kubent.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "kubent"
+version = "0.7.3"
+
+[source]
+repo   = "https://github.com/doitintl/kube-no-trouble"
+commit = "57480c07b3f91238f12a35d0ec88d9368aae99aa"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/logs_tests.patch b/recipes/incoming-go/logs_tests.patch
new file mode 100644
index 00000000..9b3cd19d
--- /dev/null
+++ b/recipes/incoming-go/logs_tests.patch
@@ -0,0 +1,99 @@
+diff --git a/pkg/observability/logs/aws_test.go b/pkg/observability/logs/aws_test.go
+index 36a970d..b315f8b 100644
+--- a/pkg/observability/logs/aws_test.go
++++ b/pkg/observability/logs/aws_test.go
+@@ -21,5 +21,5 @@ func TestNewAWSWrapper(t *testing.T) {
+ 
+ 	logger.Logf(logging.Debug, "%s", "foo")
+ 
+-	assert.Equal(t, "<nil> DBG aws_test.go:22 > foo\n", buf.String())
++	assert.Equal(t, "<nil> DBG github.com/traefik/traefik/v3/pkg/observability/logs/aws_test.go:22 > foo\n", buf.String())
+ }
+diff --git a/pkg/observability/logs/datadog_test.go b/pkg/observability/logs/datadog_test.go
+index 41c6df4..47eadad 100644
+--- a/pkg/observability/logs/datadog_test.go
++++ b/pkg/observability/logs/datadog_test.go
+@@ -20,5 +20,5 @@ func TestNewDatadogLogger(t *testing.T) {
+ 
+ 	logger.Log("foo")
+ 
+-	assert.Equal(t, "<nil> DBG datadog_test.go:21 > foo\n", buf.String())
++	assert.Equal(t, "<nil> DBG github.com/traefik/traefik/v3/pkg/observability/logs/datadog_test.go:21 > foo\n", buf.String())
+ }
+diff --git a/pkg/observability/logs/elastic_test.go b/pkg/observability/logs/elastic_test.go
+index e00604d..16e1304 100644
+--- a/pkg/observability/logs/elastic_test.go
++++ b/pkg/observability/logs/elastic_test.go
+@@ -20,5 +20,5 @@ func TestNewElasticLogger(t *testing.T) {
+ 
+ 	logger.Errorf("foo")
+ 
+-	assert.Equal(t, "<nil> ERR elastic_test.go:21 > foo\n", buf.String())
++	assert.Equal(t, "<nil> ERR github.com/traefik/traefik/v3/pkg/observability/logs/elastic_test.go:21 > foo\n", buf.String())
+ }
+diff --git a/pkg/observability/logs/gokit_test.go b/pkg/observability/logs/gokit_test.go
+index 791157b..7531651 100644
+--- a/pkg/observability/logs/gokit_test.go
++++ b/pkg/observability/logs/gokit_test.go
+@@ -20,5 +20,5 @@ func TestNewGoKitWrapper(t *testing.T) {
+ 
+ 	_ = logger.Log("foo")
+ 
+-	assert.Equal(t, "<nil> DBG gokit_test.go:21 > foo\n", buf.String())
++	assert.Equal(t, "<nil> DBG github.com/traefik/traefik/v3/pkg/observability/logs/gokit_test.go:21 > foo\n", buf.String())
+ }
+diff --git a/pkg/observability/logs/hclog_test.go b/pkg/observability/logs/hclog_test.go
+index 02681d7..50fe5e2 100644
+--- a/pkg/observability/logs/hclog_test.go
++++ b/pkg/observability/logs/hclog_test.go
+@@ -20,5 +20,5 @@ func TestNewRetryableHTTPLogger(t *testing.T) {
+ 
+ 	logger.Info("foo")
+ 
+-	assert.Equal(t, "<nil> INF hclog_test.go:21 > Foo\n", buf.String())
++	assert.Equal(t, "<nil> INF github.com/traefik/traefik/v3/pkg/observability/logs/hclog_test.go:21 > Foo\n", buf.String())
+ }
+diff --git a/pkg/observability/logs/instana_test.go b/pkg/observability/logs/instana_test.go
+index 38b53f2..dc758f0 100644
+--- a/pkg/observability/logs/instana_test.go
++++ b/pkg/observability/logs/instana_test.go
+@@ -20,5 +20,5 @@ func TestNewInstanaLogger(t *testing.T) {
+ 
+ 	logger.Info("foo")
+ 
+-	assert.Equal(t, "<nil> INF instana_test.go:21 > foo\n", buf.String())
++	assert.Equal(t, "<nil> INF github.com/traefik/traefik/v3/pkg/observability/logs/instana_test.go:21 > foo\n", buf.String())
+ }
+diff --git a/pkg/observability/logs/log_test.go b/pkg/observability/logs/log_test.go
+index 5c80e76..26fd44a 100644
+--- a/pkg/observability/logs/log_test.go
++++ b/pkg/observability/logs/log_test.go
+@@ -20,5 +20,5 @@ func TestNoLevel(t *testing.T) {
+ 
+ 	logger.Info().Msg("foo")
+ 
+-	assert.Equal(t, "<nil> INF log_test.go:21 > foo\n", buf.String())
++	assert.Equal(t, "<nil> INF github.com/traefik/traefik/v3/pkg/observability/logs/log_test.go:21 > foo\n", buf.String())
+ }
+diff --git a/pkg/observability/logs/logrus_test.go b/pkg/observability/logs/logrus_test.go
+index af3c085..d30889a 100644
+--- a/pkg/observability/logs/logrus_test.go
++++ b/pkg/observability/logs/logrus_test.go
+@@ -20,5 +20,5 @@ func TestNewLogrusStdWrapper(t *testing.T) {
+ 
+ 	logger.Println("foo")
+ 
+-	assert.Equal(t, "<nil> DBG logrus_test.go:21 > foo\n", buf.String())
++	assert.Equal(t, "<nil> DBG github.com/traefik/traefik/v3/pkg/observability/logs/logrus_test.go:21 > foo\n", buf.String())
+ }
+diff --git a/pkg/observability/logs/oxy_test.go b/pkg/observability/logs/oxy_test.go
+index 5645986..26f915c 100644
+--- a/pkg/observability/logs/oxy_test.go
++++ b/pkg/observability/logs/oxy_test.go
+@@ -20,5 +20,5 @@ func TestNewOxyWrapper(t *testing.T) {
+ 
+ 	logger.Info("foo")
+ 
+-	assert.Equal(t, "<nil> INF oxy_test.go:21 > foo\n", buf.String())
++	assert.Equal(t, "<nil> INF github.com/traefik/traefik/v3/pkg/observability/logs/oxy_test.go:21 > foo\n", buf.String())
+ }
diff --git a/recipes/incoming-go/mockgen.toml b/recipes/incoming-go/mockgen.toml
new file mode 100644
index 00000000..3ba0bab7
--- /dev/null
+++ b/recipes/incoming-go/mockgen.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "mockgen"
+version = "0.6.0"
+
+[source]
+repo   = "https://github.com/uber-go/mock"
+commit = "2d1c58167e30f380cf78e44a43b100a14767e817"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/naabu.toml b/recipes/incoming-go/naabu.toml
new file mode 100644
index 00000000..10f72864
--- /dev/null
+++ b/recipes/incoming-go/naabu.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "naabu"
+version = "2.6.1"
+
+[source]
+repo   = "https://github.com/projectdiscovery/naabu"
+commit = "5a0ca8bde91b5bb16213e9e8b5c6871eac954bd8"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go, libpcap
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/nuclei.toml b/recipes/incoming-go/nuclei.toml
new file mode 100644
index 00000000..45147150
--- /dev/null
+++ b/recipes/incoming-go/nuclei.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "nuclei"
+version = "3.9.0"
+
+[source]
+repo   = "https://github.com/projectdiscovery/nuclei"
+commit = "ffbb05b254b3d11d985c486d9512c25bd0fa56be"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/osv-scanner.toml b/recipes/incoming-go/osv-scanner.toml
new file mode 100644
index 00000000..3e1380dc
--- /dev/null
+++ b/recipes/incoming-go/osv-scanner.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "osv-scanner"
+version = "2.3.3"
+
+[source]
+repo   = "https://github.com/google/osv-scanner"
+commit = "b97d1de7d8c3c7de8c11308b3d9cb5bbf3f7a0e9"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/popeye.toml b/recipes/incoming-go/popeye.toml
new file mode 100644
index 00000000..49c0c7c4
--- /dev/null
+++ b/recipes/incoming-go/popeye.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "popeye"
+version = "0.22.1"
+
+[source]
+repo   = "https://github.com/derailed/popeye"
+commit = "35b554961dcdabfa7aba6bd070673c6c24c70884"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/qsreplace.toml b/recipes/incoming-go/qsreplace.toml
new file mode 100644
index 00000000..6ea57bbd
--- /dev/null
+++ b/recipes/incoming-go/qsreplace.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "qsreplace"
+version = "0.0.3"
+
+[source]
+repo   = "https://github.com/tomnomnom/qsreplace"
+commit = "320475befaf66d986400aa8c3ed9b43e0b6b5a02"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/sq.toml b/recipes/incoming-go/sq.toml
new file mode 100644
index 00000000..431f57bf
--- /dev/null
+++ b/recipes/incoming-go/sq.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "sq"
+version = "0.50.0"
+
+[source]
+repo   = "https://github.com/neilotoole/sq"
+commit = "e81a9c59e21fc215ac109f878342027d44e6f7ad"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/stern.toml b/recipes/incoming-go/stern.toml
new file mode 100644
index 00000000..ba0726a3
--- /dev/null
+++ b/recipes/incoming-go/stern.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "stern"
+version = "1.34.0"
+
+[source]
+repo   = "https://github.com/stern/stern"
+commit = "b6f1226e8eb72fb182cebfdcb5ef02c40813d6f3"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/subfinder.toml b/recipes/incoming-go/subfinder.toml
new file mode 100644
index 00000000..8e6ccb89
--- /dev/null
+++ b/recipes/incoming-go/subfinder.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "subfinder"
+version = "2.14.0"
+
+[source]
+repo   = "https://github.com/projectdiscovery/subfinder"
+commit = "0ed1b0b622fd94ac96877af3a7082117fca60772"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/syslog-log-format.patch b/recipes/incoming-go/syslog-log-format.patch
new file mode 100644
index 00000000..fa6b22c5
--- /dev/null
+++ b/recipes/incoming-go/syslog-log-format.patch
@@ -0,0 +1,98 @@
+Add "syslog" log format.
+
+I didn't contribute this patch to the upstream because I don't wanna
+contribute to any Go projects. However, if you find this patch useful,
+feel free to send it to the upstream under your name.
+
+diff --git a/log/configuration.go b/log/configuration.go
+index a756242b8..cbe4dabcd 100644
+--- a/log/configuration.go
++++ b/log/configuration.go
+@@ -13,6 +13,7 @@ const (
+ 	FormatRunner = "runner"
+ 	FormatText   = "text"
+ 	FormatJSON   = "json"
++	FormatSyslog = "syslog"
+ )
+ 
+ var (
+@@ -26,7 +27,7 @@ var (
+ 		},
+ 		cli.StringFlag{
+ 			Name:   "log-format",
+-			Usage:  "Choose log format (options: runner, text, json)",
++			Usage:  "Choose log format (options: runner, text, json, syslog)",
+ 			EnvVar: "LOG_FORMAT",
+ 		},
+ 		cli.StringFlag{
+@@ -44,6 +45,7 @@ var (
+ 		FormatJSON: &logrus.JSONFormatter{
+ 			TimestampFormat: time.RFC3339Nano,
+ 		},
++		FormatSyslog: new(SyslogFormatter),
+ 	}
+ )
+ 
+diff --git a/log/syslog_formatter.go b/log/syslog_formatter.go
+new file mode 100644
+index 000000000..fe60e0fc7
+--- /dev/null
++++ b/log/syslog_formatter.go
+@@ -0,0 +1,57 @@
++package log
++
++import (
++	"bytes"
++	"fmt"
++	"time"
++
++	"github.com/sirupsen/logrus"
++)
++
++type SyslogFormatter struct {
++}
++
++func (f *SyslogFormatter) Format(entry *logrus.Entry) ([]byte, error) {
++	var b *bytes.Buffer
++	if entry.Buffer != nil {
++		b = entry.Buffer
++	} else {
++		b = &bytes.Buffer{}
++	}
++
++	if entry.Message != "" {
++		b.WriteString(entry.Message)
++	}
++	dataWritten := false
++	for key, val := range entry.Data {
++		if key == "now" {
++			continue
++		}
++		var stringVal string
++
++		switch val := val.(type) {
++		case time.Time:
++			stringVal = val.Format(time.RFC3339)
++		default:
++			var ok bool
++			if stringVal, ok = val.(string); !ok {
++				stringVal = fmt.Sprint(val)
++			}
++		}
++
++		// The format is inspired by RFC 5424 STRUCTURED-DATA.
++		if dataWritten {
++			b.WriteByte(' ')
++		} else {
++			b.WriteString(" [meta ")
++			dataWritten = true
++		}
++		b.WriteString(fmt.Sprintf("%s=%q", key, stringVal))
++	}
++	if dataWritten {
++		b.WriteByte(']')
++	}
++	b.WriteByte('\n')
++
++	return b.Bytes(), nil
++}
diff --git a/recipes/incoming-go/umoci.toml b/recipes/incoming-go/umoci.toml
new file mode 100644
index 00000000..93959530
--- /dev/null
+++ b/recipes/incoming-go/umoci.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "umoci"
+version = "0.6.0"
+
+[source]
+repo   = "https://github.com/opencontainers/umoci"
+commit = "1c44d6f2f9e4b50f5d2a99463f540acf9915dd47"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go, go-md2man
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/unfurl.toml b/recipes/incoming-go/unfurl.toml
new file mode 100644
index 00000000..41033d14
--- /dev/null
+++ b/recipes/incoming-go/unfurl.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "unfurl"
+version = "0.4.3"
+
+[source]
+repo   = "https://github.com/tomnomnom/unfurl"
+commit = "8f10d050f1b0be12e505053da174f3f39e8eed74"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/use-logrus-syslog-hook.patch b/recipes/incoming-go/use-logrus-syslog-hook.patch
new file mode 100644
index 00000000..0690d30f
--- /dev/null
+++ b/recipes/incoming-go/use-logrus-syslog-hook.patch
@@ -0,0 +1,43 @@
+Replace gitlab-runner/log/system_logger with standard logrus/hooks/syslog.
+There are two reasons:
+
+1. gitlab-runner/log/system_logger delegates the syslog initialization
+   (syslog.Dial) to kardianos/service, which doesn't set the syslog
+   facility. This results in messages logged with the "kern" facility.
+2. gitlab-runner/log/system_logger maps Error, Panic, and Fatal levels
+   to the syslog's "err" level, but Panic and Fatal could be mapped to
+   the "crit" level.
+
+I didn't contribute this patch to the upstream because I don't wanna
+contribute to any Go projects. However, if you find this patch useful,
+feel free to send it to the upstream under your name.
+
+diff --git a/commands/multi.go b/commands/multi.go
+index e62594be6..a0c2d659b 100644
+--- a/commands/multi.go
++++ b/commands/multi.go
+@@ -37,6 +37,9 @@ import (
+ 	"gitlab.com/gitlab-org/gitlab-runner/log"
+ 	"gitlab.com/gitlab-org/gitlab-runner/network"
+ 	"gitlab.com/gitlab-org/gitlab-runner/session"
++
++	"log/syslog"
++	lSyslog "github.com/sirupsen/logrus/hooks/syslog"
+ )
+ 
+ const (
+@@ -1462,7 +1465,13 @@ func (mr *RunCommand) Execute(_ *cli.Context) {
+ 	}
+ 
+ 	if mr.Syslog {
+-		log.SetSystemLogger(logrus.StandardLogger(), svc)
++		hook, err := lSyslog.NewSyslogHook("", "", syslog.LOG_DAEMON | syslog.LOG_INFO, mr.ServiceName)
++		if err == nil {
++			logrus.AddHook(hook)
++		} else {
++			logrus.WithError(err).
++				Error("Error while setting up the system logger")
++		}
+ 	}
+ 
+ 	mr.sentryLogHookMutex.Lock()
diff --git a/recipes/incoming-go/vals.toml b/recipes/incoming-go/vals.toml
new file mode 100644
index 00000000..38c19845
--- /dev/null
+++ b/recipes/incoming-go/vals.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "vals"
+version = "0.44.1"
+
+[source]
+repo   = "https://github.com/helmfile/vals"
+commit = "6e5b73ef571841fbcfd8486c4bb81c2ac8f18c86"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming-go/waybackurls.toml b/recipes/incoming-go/waybackurls.toml
new file mode 100644
index 00000000..d08cb33a
--- /dev/null
+++ b/recipes/incoming-go/waybackurls.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "waybackurls"
+version = "0.1.0"
+
+[source]
+repo   = "https://github.com/tomnomnom/waybackurls"
+commit = "86aeb97852707e1a6fb3bcd33e61d5433a6476c5"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/tandas/fuel-go-weekend.txt b/tandas/fuel-go-weekend.txt
new file mode 100644
index 00000000..458bb5b5
--- /dev/null
+++ b/tandas/fuel-go-weekend.txt
@@ -0,0 +1,51 @@
+# fuel-go-weekend — cola grande pre-vetada para el finde desatendido. Queue AISLADO incoming-go/.
+stern
+kail
+popeye
+kube-score
+kubeconform
+kubent
+polaris
+goldilocks
+kube-capacity
+vals
+helmsman
+subfinder
+naabu
+katana
+nuclei
+gau
+waybackurls
+gobuster
+ffuf
+anew
+qsreplace
+unfurl
+gf
+gojq
+sq
+golangci-lint
+gofumpt
+gci
+gotests
+mockgen
+golines
+buf
+bazelisk
+act
+gitlab-runner
+gosec
+nancy
+osv-scanner
+scorecard
+kics
+gitsign
+git-lfs
+hub
+gitbatch
+gotop
+inlets
+umoci
+traefik
+gh-dash
+dyff