build: add lint target

ober

790fb5c55d358bb4764fe8fa8d0e70f1d3fd5ce8

diff --git a/Makefile b/Makefile
index 55d3056..e5a109a 100644
--- a/Makefile
+++ b/Makefile
@@ -24,7 +24,7 @@ SOAK_ITERATIONS ?= 8
 BINARY_SMOKE_TIMEOUT_SECONDS ?= 10
 
 .PHONY: vendor-deps ensure-jerboa ensure-jsqlite rust test ffi-demo kernels-check triage-check triage-store-check analytics-check detect-check storage-check entity-check threats-check geoip-check sigma-check yaml-rules-check buffer-check dns-sniffer-check suspicious-check netconn-check kernmod-check selinux-check container-check dns-servers-check sensitive-path-check dtrace-parse-check dtrace-runtime-check stealth-check ebpf-events-check ebpf-runtime-check proc-linux-check freebsd-parse-check event-meta-check config-check privdrop-check event-danger-check persistence-check file-change-check webshell-check platform-mounts-check analyze-cli-check collector-cli-check event-summary-check ioc-check frame-check correlate-check revshell-check cron-check logtamper-check detection-rules-check daemon-telemetry-check mux-telemetry-check ipaddr-check auth-check lolbin-check dga-check calendar-check monitor-process-check monitor-network-check monitor-files-check monitor-auth-check monitor-kernel-check monitor-cron-check monitor-container-check monitor-rootkit-check monitor-podman-check monitor-selinux-check monitor-lateral-check monitor-webshell-check monitor-revshell-check monitor-persistence-check monitor-logtamper-check monitor-dns-check monitor-manager-check event-json-check collector-check protocol-check event-codec-check local-store-check secure-key-check network-guard-check collector-pull-check agent-server-check checks native-runtime keygen analyze collector agent telemetry binaries clean
-.PHONY: security audit verify sbom reproducibility-report release-evidence soak-check soak-evidence binary-smoke
+.PHONY: security audit verify sbom reproducibility-report release-evidence soak-check soak-evidence binary-smoke lint
 # Combined libdir path so sibling libraries `(jsecmon ...)` resolve to ./jsecmon
 # (a second --libdirs would replace, not append, the jerboa one).
 LIBDIRS := "$(CURDIR):$(JSQLITE_SRC):$(JERBOA)/lib"
@@ -667,6 +667,8 @@ soak-evidence:
 
 verify: security test checks audit
 
+lint: buffer-check
+
 sbom: rust
 	REPO_ROOT="$(CURDIR)" SBOM_DIR="$(SBOM_DIR)" BUILD="$(BUILD)" SCHEME="$(SCHEME)" sh scripts/sbom.sh