verifying go.mongodb.org/mongo-driver@v1.4.5: checksum mismatch

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Gone away
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      We are seeing checksum mismatches for the mongo-driver package. https://github.com/mongodb/mongo-go-driver/releases/tag/v1.4.5

      Did this tag published multiple times with different commit histories? Here's a blurb from our github-action, feel free to look at it here: https://github.com/infobloxopen/konk/pull/164/checks?check_run_id=1763876974 Click PR and it should scroll to the location.

       

      2021-01-25T17:55:21.2288352Z verifying go.mongodb.org/mongo-driver@v1.4.5: checksum mismatch
2021-01-25T17:55:21.2289491Z 	downloaded: h1:TLtO+iD8krabXxvY1F1qpBOHgOxhLWR7XsT7kQeRmMY=
2021-01-25T17:55:21.2290496Z 	go.sum:     h1:z4/YQzLTxI+ymcrS//Wc2JBn2b9ojvpVH3BaYT8rqUc=
2021-01-25T17:55:21.2290924Z 
2021-01-25T17:55:21.2291238Z SECURITY ERROR
2021-01-25T17:55:21.2291743Z This download does NOT match an earlier download recorded in go.sum.
2021-01-25T17:55:21.2292419Z The bits may have been replaced on the origin server, or an attacker may
2021-01-25T17:55:21.2293009Z have intercepted the download attempt.
2021-01-25T17:55:21.2293328Z 
2021-01-25T17:55:21.2293915Z For more information, see 'go help module-auth'.
2021-01-25T17:55:27.4756800Z The command '/bin/sh -c go mod download' returned a non-zero code: 1

       

            Assignee:
            Divjot Arora (Inactive)
            Reporter:
            Drew Wells
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: