nxadm/tail

Checksum on sum.golang.org does not match

leucos opened this issue · 4 comments

leucos commented

It seems hash present on https://sum.golang.org/ does not match module:

go: finding github.com/nxadm/tail v1.4.1
go: downloading github.com/nxadm/tail v1.4.1
verifying github.com/nxadm/tail@v1.4.1: checksum mismatch
	downloaded: h1:Vw207joT1RO2/h2d+lr3BdpTt1LVvBX4sjdiK5Zitu4=
	go.sum:     h1:IvsH0xPk6Z+ORn/PoTiBbD2Ig7241sucVgFy4S/5nas=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

Was there any forced tag change ?

nxadm commented

I will fix it right away.

nxadm commented

@leucos, thank you for catching it. I was experimenting with travis and forced a tag (a bad idea). It should be fixed now.

leucos commented 
$ go get -u github.com/nxadm/tail
go: finding github.com/nxadm/tail v1.4.4
go: downloading github.com/nxadm/tail v1.4.4
go: extracting github.com/nxadm/tail v1.4.4

Awesome, thanks !!

leucos commented

And thank you for taking over tail and maintaining it 👍

  • ❤️1