3 ms·
I don't know for Go case how it would work, but what I saw in case of Maven is it's company wide blocked and you have to get your packages through Sonatype Nexu
by a1o 3y ago
I don't know for Go case how it would work, but what I saw in case of Maven is it's company wide blocked and you have to get your packages through Sonatype Nexus - and Nexus either has it's own packages or it has a proxy for Maven packages. So I wonder in case of Go, if it would be unfeasible to block GitHub so they would just block the entire use of the language in company developed software.
- gabereiser 3y agoexactly. If you block go packages via firewall IT rules, you block github.com software engineering work. It's the one thing I think that's holding Golang back. Deno as well. I know it looks novel but it's a security nightmare.
- klooney 3y agoBlocking the official Google Go proxy will work pretty well, go get will just fail by default. If someone works around that on a developer machine, it shouldn't matter, because release builds should still come from an automated system, right?