quaint-telephone-89068
12/13/2022, 11:06 PMgo.sum entries for the third party dependency under test. Fortunately, Pants and Go still error out if an inconsistent go.sum entry is present. I tested that by running go mod download to update go.sum and then editing an entry in go.sum to be intentionally wrong; a build then failed as expected due to the checksum mismatch.
The go toolchain will mutate go.sum to add missing go.sum entries. Pants should either do that or detect when such mutation is necessary and error instead of silently allowing the situation.
I suspect that go is modifying the copy of go.sum present in an execution sandbox but Pants is not detecting when such modification occurs.
pantsbuild/pantsuser
12/15/2022, 11:12 PM