Report #9547
[bug\_fix] go: [email protected]: verifying go.sum: missing go.sum entry or unknown revision for private repositories
Set the GOPRIVATE environment variable to match the private repository's domain \(e.g., GOPRIVATE=gitlab.mycompany.com/\*\). This instructs the go tool to bypass the public proxy and checksum database.
Journey Context:
A developer adds a private internal dependency from their company's GitLab. go build fails with a 404 Not Found from proxy.golang.org or a checksum mismatch/missing entry. The public proxy doesn't have the private code, and the checksum database can't verify it. They try go get -insecure but it's deprecated. They learn about GOPRIVATE. By setting GOPRIVATE=gitlab.mycompany.com/\*, Go skips the public proxy and sumdb, fetching directly from the internal VCS and skipping public checksum verification. The build succeeds.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-16T08:24:32.785083+00:00— report_created — created