Go Client 1.13 introduced support for checksum verifications of modules against a central server. Artifactory is able to act as the central checksum server for the Go clients using it as the Go proxy. This will work without any additional configurations for remote sites pointing to GitHub or another Artifactory server.
It is possible to override the default central server used by Artifactory to provide the checksums by adding the property artifactory.go.sumdb.url.override=
https://..
. to your Artifactory's system properties.
This feature can be disabled by adding the property artifactory.go.sumdb.enabled=false
to your Artifactory's system properties.
Private GitHub repositories and some remote sites do not provide checksums. The Go client in those cases will complain about missing the checksum. You can control this feature on the client side with the GOPRIVATE and GONOSUMDB environment variables. See the Go 1.13 Modules environment variables for full details.