Configuring Go

Point Go modules at the Seal Artifact Server using the GOPROXY environment variable.

Go modules read the proxy URL from the GOPROXY environment variable. The Seal Artifact Server is set up as the first entry, with direct as the fallback so packages that Seal does not serve still resolve from their upstream sources.

Configuration

Set GOPROXY before running go mod download or go build:

export GOPROXY="https://<project-id>:<token>@go.sealsecurity.io,direct"
go mod download

Replace <project-id> with the Seal Project ID and <token> with your production token. The credentials ride in the URL's userinfo block.

In CI, set GOPROXY once at the job level rather than per command.

Verify

GOPROXY="https://<project-id>:<token>@go.sealsecurity.io,direct" go mod download -x

The -x flag prints each network operation; the output should show requests to go.sealsecurity.io for the modules Go fetches.

Related

• Editing dependency files manually: pinning sealed versions in go.mod and using the replace directive for transitive overrides.