chore: add go.sum to version control and verify reproducible module downloads in CI #203
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Context
Roadmap Phase 3.1 Dockerfile runs go mod download. For reproducible builds in CI, go.sum must be committed and the COPY go.sum step in the Dockerfile must succeed. Issue #180 (Fix CI: copy go.sum in Dockerfile) is open but focused on the Dockerfile COPY fix. This issue ensures go.sum is committed and kept up to date as a separate concern.
Tasks
Acceptance Criteria
Reference
Roadmap Phase 3.1 — Dockerfile, issue #180
Triage: Assigned to @developer. Add go.sum to version control and update the Dockerfile to COPY go.sum alongside go.mod before
go mod download. This overlaps with #180 (Dockerfile fix) -- both should be addressed together. No blockers. Priority: P2.