Description
The .gitignore file excludes go.sum from version control. This is incorrect for Go projects - go.sum should be committed for reproducible builds.
File: .gitignore (line 20)
Impact
- Builds may not be reproducible across environments
- Dependency verification is not possible
go mod verify cannot validate checksums
Proposed Fix
- Remove
go.sum from .gitignore
- Run
go mod tidy to regenerate go.sum
- Commit the generated
go.sum
Acceptance Criteria
Labels
bug good first issue
Description
The
.gitignorefile excludesgo.sumfrom version control. This is incorrect for Go projects -go.sumshould be committed for reproducible builds.File:
.gitignore(line 20)Impact
go mod verifycannot validate checksumsProposed Fix
go.sumfrom.gitignorego mod tidyto regeneratego.sumgo.sumAcceptance Criteria
go.sumis tracked in version control.gitignoreno longer excludesgo.sumgo mod verifypassesLabels
buggood first issue