# Supply chain integrity with GoReleaser using Go mod proxy

DevFeed: [Supply chain integrity with GoReleaser using Go mod proxy](<https://devfeed.tech/articles/supply-chain-integrity-with-goreleaser-using-go-mod-proxy-37854.md>)

Original publisher: [Read original article](<https://carlosbecker.com/posts/supply-chain-goreleaser-go-mod-proxy/>)

Author: Carlos Alexandro Becker

Published: 2021-08-23T00:00:00Z

Content type: tutorial

Language: en

Sources: [Carlos Becker](<https://devfeed.tech/sources/carlos-becker.md>)

Topics: [integrity](<https://devfeed.tech/topics/integrity.md>), [Go Language](<https://devfeed.tech/topics/go-language.md>), [proxy](<https://devfeed.tech/topics/proxy.md>), [builds](<https://devfeed.tech/topics/builds.md>), [hash](<https://devfeed.tech/topics/hash.md>), [opensource](<https://devfeed.tech/topics/opensource.md>)

Tags: [builds](<https://devfeed.tech/tags/builds.md>), [go](<https://devfeed.tech/tags/go.md>), [hash](<https://devfeed.tech/tags/hash.md>), [making](<https://devfeed.tech/tags/making.md>), [opensource](<https://devfeed.tech/tags/opensource.md>), [proxy](<https://devfeed.tech/tags/proxy.md>), [supply-chain-integrity](<https://devfeed.tech/tags/supply-chain-integrity.md>)

## AI overview

This tutorial explains how to verify Go binaries built with GoReleaser by using the Go module proxy and comparing module hashes. It also discusses signing, reproducible builds, and limitations involving dependencies and non-open-source GoReleaser Pro.

## Source excerpt

Since the infamous SolarWinds attack, supply chain integrity is something a lot of people are discussing and working on.