sumdb
Go's trust on first use (TOFU) checksum datastore for verifying the code you fetch is the code you think it is.
It also prevents re-publishing of a given tag. So once a v1.1.1 is cut, you can't re-publish new code as v1.1.1.
Go's trust on first use (TOFU) checksum datastore for verifying the code you fetch is the code you think it is.
It also prevents re-publishing of a given tag. So once a v1.1.1 is cut, you can't re-publish new code as v1.1.1.
Created: 2025-08-07 Thu 11:31