Work with GOSUMDB

JFrog Artifactory Documentation

Products
JFrog Artifactory
Content Type
User Guide
ft:sourceType
Paligo

Go Client 1.13 introduced support for checksum verifications of modules against a central server. Artifactory is able to act as the central checksum server for the Go clients using it as the Go proxy. This will work without any additional configurations for remote sites pointing to GitHub or another Artifactory server.

It is possible to override the default central server used by Artifactory to provide the checksums by adding the property artifactory.go.sumdb.url.override= https://... to your Artifactory's system properties.Artifactory Configuration Files

This feature can be disabled by adding the property artifactory.go.sumdb.enabled=false to your Artifactory's system properties.Artifactory Configuration Files

Private GitHub repositories and some remote sites do not provide checksums. The Go client in those cases will complain about missing the checksum. You can control this feature on the client side with the GOPRIVATE and GONOSUMDB environment variables. See the Go 1.13 Modules environment variables for full details.