Following our announcement last week about our support for the Go Proxy, we have released two new feature enhancements.
Caching for Go modules
- Modules fetched from proxy.golang.org can now be cached in your Cloudsmith repository.
- This allows all your Go modules to be stored and consumed directly from Cloudsmith, enabling vulnerability scanning, license compliance checks, and the ability to apply policies to your Go Modules.
Proxy to Go Checksum Database
- Cloudsmith can now proxy requests to the Go Checksum Database (sum.golang.org), allowing verification of public Go modules. The global checksum database is a public transparency log containing a list of checksums for every module stored in the Go Module Proxy. This verification method allows you to detect any tampering attempt on your libraries.
Go upstreams are still in Early Access. Contact us to enable it for your organization.