microsoft / go

The Microsoft build of the Go toolset
BSD 3-Clause "New" or "Revised" License
267 stars 26 forks source link

Include FIPS-compatible Go in CBL-Mariner #466

Open dagood opened 2 years ago

dagood commented 2 years ago

As of writing, CBL-Mariner downloads the upstream Go source archives and builds them. A possible next step is CBL-Mariner downloading our release branch source archives and building those, instead. The goal is for CBL-Mariner to download the source archives of our FIPS-compatible branch and include that in the distro.

We need to deliver source archives (status: complete, via GitHub releases as requested by CBL-Mariner team #398), and work with CBL-Mariner to have them switch over.

It might make sense for Mariner to build both FIPS and non-FIPS source archives and use alternatives (or some alternative to alternatives 😄) so CBL-Mariner users can pick the version they need.

mfrw commented 2 years ago

We've shipped microsoft/go -> msft-golang.

/cc @dagood