Describe the bug
go install report mismatch problems
go install -v github.com/cli/cli/v2/cmd/gh@latest
ps: I can work around this by GOSUMDB=off, but the reported dependency mismatch maybe caused by the goproxy or the maintainer.
Affected version
Please run gh version and paste the output below.
Steps to reproduce the behavior
- run
go install -v github.com/cli/cli/v2/cmd/gh@latest
Expected vs actual behavior
installed successfully.
Logs
$ go install -v github.com/cli/cli/v2/cmd/gh@latest
go: downloading github.com/charmbracelet/glamour v0.10.0
go: downloading github.com/charmbracelet/x/ansi v0.9.3
../go/pkg/mod/github.com/charmbracelet/[email protected]/align.go:6:2: github.com/charmbracelet/x/[email protected]: verifying module: checksum mismatch
downloaded: h1:N/UztZRAGcBZH0peJzdQkNQ/l9O2eSvAekrnQ7VdSOY=
sum.golang.org: h1:BXt5DHS/MKF+LjuK4huWrC6NCvHtexww7dMayh6GXd0=
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
For more information, see 'go help module-auth'.
../go/pkg/mod/github.com/cli/cli/[email protected]/pkg/cmd/extension/browse/browse.go:14:2: github.com/charmbracelet/[email protected]: verifying module: checksum mismatch
downloaded: h1:41/IYxsmIpaBjkMXjrjLwsHDBlucd5at6tY5n2r/qn4=
sum.golang.org: h1:MtZvfwsYCx8jEPFJm3rIBFIMZUfUJ765oX8V6kXldcY=
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
For more information, see 'go help module-auth'.
../go/pkg/mod/github.com/cli/go-gh/[email protected]/pkg/x/markdown/accessibility.go:7:2: github.com/charmbracelet/[email protected]: verifying module: checksum mismatch
downloaded: h1:41/IYxsmIpaBjkMXjrjLwsHDBlucd5at6tY5n2r/qn4=
sum.golang.org: h1:MtZvfwsYCx8jEPFJm3rIBFIMZUfUJ765oX8V6kXldcY=
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
For more information, see 'go help module-auth'.
../go/pkg/mod/github.com/cli/go-gh/[email protected]/pkg/x/markdown/accessibility.go:8:2: github.com/charmbracelet/[email protected]: verifying module: checksum mismatch
downloaded: h1:41/IYxsmIpaBjkMXjrjLwsHDBlucd5at6tY5n2r/qn4=
sum.golang.org: h1:MtZvfwsYCx8jEPFJm3rIBFIMZUfUJ765oX8V6kXldcY=
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
For more information, see 'go help module-auth'.
Describe the bug
go install report mismatch problems
ps: I can work around this by GOSUMDB=off, but the reported dependency mismatch maybe caused by the goproxy or the maintainer.
Affected version
Please run
gh versionand paste the output below.Steps to reproduce the behavior
go install -v github.com/cli/cli/v2/cmd/gh@latestExpected vs actual behavior
installed successfully.
Logs