Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating to swag 1.7.2 fails with a checksum error #1006

Closed
kolaente opened this issue Sep 24, 2021 · 4 comments · Fixed by #1007
Closed

Updating to swag 1.7.2 fails with a checksum error #1006

kolaente opened this issue Sep 24, 2021 · 4 comments · Fixed by #1007

Comments

@kolaente
Copy link
Contributor

Describe the bug

Running GOPROXY=direct go get -u github.com/swaggo/swag in a project with swag 1.7.1 installed fails:

$ GOPROXY=direct go get -u github.com/swaggo/swag
go: downloading github.com/swaggo/swag v1.7.2
go get: github.com/swaggo/swag@v1.7.2: verifying module: checksum mismatch
	downloaded: h1:CA4/ezTlV00Tlfb/7Tgt97VLDtn4kfPswoew8VLs6qc=
	sum.golang.org: h1:ymR5/BHAVylGilrqxU78UNUIfVBDjBwnEWWaOeOm7aE=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

To Reproduce
Steps to reproduce the behavior:

  1. Check out a project with swag 1.7.1 installed
  2. Run GOPROXY=direct go get -u github.com/swaggo/swag
  3. See error

Expected behavior
Update works

Your swag version
1.7.1, but more likely affecting 1.7.2

Your go version
1.16.5 linux/amd64

@ubogdan
Copy link
Contributor

ubogdan commented Sep 24, 2021

it should be fine in 1.7.3

@kolaente
Copy link
Contributor Author

This is now happening again, this time with 1.7.5:

$ GOPROXY=direct go get -u github.com/swaggo/swag          

go: downloading github.com/swaggo/swag v1.7.5
go get: github.com/swaggo/swag@v1.7.5: verifying module: checksum mismatch
	downloaded: h1:ZMxuVDmGJ09Lgn9l7TGfEaT/4xWowQqAatzgjgrnOHE=
	sum.golang.org: h1:Qirr4bt+mZ+idHOsHAT5AVettx8no9KuAlQpQx9ghwA=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

ping @ubogdan

@ubogdan
Copy link
Contributor

ubogdan commented Nov 26, 2021

switched to 1.7.6

@kolaente
Copy link
Contributor Author

@ubogdan Works now, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants