cosign
cosign copied to clipboard
Cuelang version error with go installer
Description
I was attempting to install cosign locally on my Fedora 40 macine using the command:
go install github.com/sigstore/cosign/v2/cmd/cosign@latest
And received the following error:
pkg/mod/github.com/sigstore/cosign/[email protected]/pkg/cosign/cue/cue.go:19:2: reading cuelang.org/go/go.mod at revision v0.8.1: unknown revision v0.8.1
pkg/mod/github.com/sigstore/cosign/[email protected]/pkg/cosign/cue/cue.go:20:2: reading cuelang.org/go/go.mod at revision v0.8.1: unknown revision v0.8.1
pkg/mod/github.com/sigstore/cosign/[email protected]/pkg/cosign/cue/cue.go:21:2: reading cuelang.org/go/go.mod at revision v0.8.1: unknown revision v0.8.1
At the following step:
go: downloading cuelang.org/go v0.8.1
Notable information is that go.mod appears to specify cuelang v0.9.2, so it is unclear why the go installer is attempting to download an older version of cuelang. The rpm binary installation from the official docs was successful.
Version OS: Fedora 40 Go: 1.22.5