search

k3d-io / k3d

Little helper to run CNCF's k3s in Docker
https://k3d.io/
MIT License
5.48k stars 462 forks source link

[BUG] go module v5.6.2 verifying module: checksum mismatch #1426

Closed yegortokmakov closed 7 months ago

yegortokmakov commented 7 months ago

What did you do

go env -w GOPROXY=direct
go get github.com/k3d-io/k3d/v5

What did you expect to happen

get the package

Screenshots or terminal output

go: downloading github.com/k3d-io/k3d/v5 v5.6.2
go: github.com/k3d-io/k3d/v5@v5.6.2: verifying module: checksum mismatch
    downloaded: h1:AxWGxRqxgsNGGtcOpNZWQiZ22ezoALZXBBOUfWCVMfg=
    sum.golang.org: h1:nuMLn3j4QmF3AVCOGI7iSVpQdI82QKnYDrN0LqzMgmo=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

go version go1.22.2 linux/amd64

yegortokmakov commented 7 months ago

manually adding hash to go.sum helped: github.com/k3d-io/k3d/v5 v5.6.2 h1:AxWGxRqxgsNGGtcOpNZWQiZ22ezoALZXBBOUfWCVMfg=

any chance the tag was overwritten and proxy/gosumdb got out of sync?

iwilltry42 commented 7 months ago

That's probably because v5.6.2 Tag was moved to a new commit, because of some pipeline error. I'll tag a new one to get this fixed.

yegortokmakov commented 7 months ago

confirmed fix in 5.6.3. thanks!