We use Docker’s Go library to manage docker.
I got a really weird message today when building our project inside TravisCI:
go: verifying firstname.lastname@example.org: checksum mismatch downloaded: h1:mJtkfC9RUrUWHMk0cFDNhVoc9U3k2FRAzEZ+5pqSIHo= go.sum: h1:Zl/9mUfPbYbnv895OXx9WfxPjwqSZHohuZzVcjJ5QPQ=
This is coming from
go mod, which downloads the library and checksums it against a value recorded in go.sum.
While I could just nuke it and move on, these things aren’t supposed to happen and I think the docker team should at least be aware of it.