You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
First, thank you for creating this generic-fork of the GoDS repo, I've been using it with success for the past month or so.
That said, my CICD system caches the Go mod/sum information, that way the data doesn't need to be pulled each time from the origin but also in case of a malicious replacement of a version of a package.
It seems like there may have been a change or replacement of v0.10.2 sometime in the last month or two?
github.com/ugurcsen/[email protected]: verifying module: checksum mismatch
downloaded: h1:LeNa5QEDBRqZik4hvrbikzcyPjQk+ZZ3WL4F9j5QQKg=
sum.golang.org: h1:dE/4oQEeO/oMVcWwcVeJhboxYJ0WVIbVVjOGJ32xL90=
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
For more information, see 'go help module-auth'.
There also seem to be a small number of updates on master. In order to correct this issue would it be possible to release another small version bump, perhaps v0.10.4 to correct the mismatch issue with 0.10.2?
Thank you!
The text was updated successfully, but these errors were encountered:
Hello!
First, thank you for creating this generic-fork of the GoDS repo, I've been using it with success for the past month or so.
That said, my CICD system caches the Go mod/sum information, that way the data doesn't need to be pulled each time from the origin but also in case of a malicious replacement of a version of a package.
It seems like there may have been a change or replacement of v0.10.2 sometime in the last month or two?
I found what looked like an accidental v0.10.3 release on deps.dev (the open source information link from the pkg.go.dev website)
https://deps.dev/go/github.com%2Fugurcsen%2Fgods-generic/v0.10.2/versions
There also seem to be a small number of updates on master. In order to correct this issue would it be possible to release another small version bump, perhaps v0.10.4 to correct the mismatch issue with 0.10.2?
Thank you!
The text was updated successfully, but these errors were encountered: