The fiano dependency in go.mod points to a commit that is not on the main branch (anymore?), which makes go build fail in some cases. The problem is hidden by the fact that go by default fetches from a proxy operated by Google, which will happily work around this issue. But Fedora disables the Google proxy by default, so building fails there.
Steps to reproduce:
$ git clone https://github.com/9elements/converged-security-suite
$ cd converged-security-suite
$ GOPROXY=direct go mod vendor
[…]
github.com/9elements/converged-security-suite/v2/pkg/uefi/ffs imports
github.com/linuxboot/fiano/pkg/visitors: github.com/linuxboot/fiano@v1.1.4-0.20230509204726-c0f54661a4fe: invalid version: unknown revision c0f54661a4fe
The fiano dependency in go.mod points to a commit that is not on the main branch (anymore?), which makes go build fail in some cases. The problem is hidden by the fact that go by default fetches from a proxy operated by Google, which will happily work around this issue. But Fedora disables the Google proxy by default, so building fails there.
Steps to reproduce:
Similar issue here with more details: https://github.com/golang/go/issues/36624