Track SecLists as a Git Submodule

Submodules keep SecLists versioned alongside your tooling.

Setup

git submodule add https://github.com/danielmiessler/SecLists.git third_party/SecLists
git commit -m "chore: add SecLists submodule"

Update workflow

git submodule update --remote --merge third_party/SecLists
git add third_party/SecLists
git commit -m "chore: bump SecLists"

Diagram

  flowchart LR
    A[Parent repo] --> B[SecLists submodule]
    B --> C[Pinned commit]
    C --> D[Update --remote]

Document the pinned commit hash in release notes so other teams can reproduce the exact wordlists used.