3 ms·
We set up an internal Athens[0] caching proxy with credentials to pull from our GitLab. So far it seems to be win/win/win - We don't need this dance in our Doc
by morelisp 6y ago
We set up an internal Athens[0] caching proxy with credentials to pull from our GitLab. So far it seems to be win/win/win
- We don't need this dance in our Dockerfiles / build scripts / dev machines anymore. We have a baked GOPROXY / GONOSUMDB in our build image and developers configure the same proxy (via `go env -w`) locally.
- We pull all packages over the proxy, so builds are faster / use less bandwidth / still mostly work when GitHub goes down.
- SCAs get more difficult; the credentials the proxy has are more limited than any individual developer's GitLab tokens / credentials, and owning the proxy is going to be harder than a single developer's laptop.
[0] https://docs.gomods.io/ https://docs.gomods.io/