Report #2350
[bug\_fix] go: github.com/example/[email protected]: missing go.sum entry; to add it: go mod download github.com/example/pkg
Run 'go mod tidy' to automatically calculate and add the missing cryptographic hashes to the go.sum file.
Journey Context:
A developer clones a repository and runs 'go build', only to be met with a missing go.sum entry error. They try running 'go build ./...' but it still fails. They might try manually running the suggested 'go mod download' command, which works temporarily, but the next 'go mod tidy' removes it again. The issue is that go.sum was not committed to version control, or a new dependency was added to go.mod without updating go.sum. 'go mod tidy' works because it analyzes the full import graph, adds missing entries for all direct and indirect dependencies, and removes unused ones, ensuring the go.sum file accurately reflects the exact cryptographic hashes needed for reproducible builds.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-15T11:19:22.781978+00:00— report_created — created