Verifiable index of the Go sumdb

See https://github.com/transparency-dev/incubator/tree/main/vindex for an introduction.

vindex.gopherwatch.org is in testing phase.

The verifier/public key for the outputlog of vindex.gopherwatch.org is:

vindex.gopherwatch.org+af4f4f3a+AYlEp21ErzmKZa+aqhjC8BQteyEtsVwmLzblkzHxn8et

See version for the version this instance is running.

Example verification of all tags in a local git repository:

$ go run github.com/transparency-dev/incubator/vindex/cmd/sumdbverify@latest \
  --base_url https://vindex.gopherwatch.org/ \
  --out_log_pub_key=vindex.gopherwatch.org+af4f4f3a+AYlEp21ErzmKZa+aqhjC8BQteyEtsVwmLzblkzHxn8et \
  --mod_root .

github.com/mjl-/mox (./go.mod)
VERSION  INDEX     FOUND  go.mod  zip
v0.0.1   15671806  ✅      ✅       ✅
v0.0.2   16194347  ✅      ✅       ✅
v0.0.3   17177962  ✅      ✅       ✅
v0.0.4   17758940  ✅      ✅       ✅
v0.0.5   18226273  ✅      ✅       ✅
v0.0.6   19072346  ✅      ✅       ✅
v0.0.7   19748762  ✅      ✅       ✅
v0.0.8   20790188  ✅      ✅       ✅
v0.0.9   21745162  ✅      ✅       ✅
v0.0.10  23500034  ✅      ✅       ✅
v0.0.11  25456882  ✅      ✅       ✅
v0.0.12  30701146  ✅      ✅       ✅
v0.0.13  31459198  ✅      ✅       ✅
v0.0.14  34039380  ✅      ✅       ✅
v0.0.15  36517406  ✅      ✅       ✅

Example lookup for github.com/mjl-/gopherwatch:

$ go run github.com/transparency-dev/incubator/vindex/cmd/client@latest \
  --vindex_base_url https://vindex.gopherwatch.org/vindex/ \
  --in_log_base_url https://vindex.gopherwatch.org/inputlog/ \
  --out_log_pub_key=vindex.gopherwatch.org+af4f4f3a+AYlEp21ErzmKZa+aqhjC8BQteyEtsVwmLzblkzHxn8et \
  --in_log_pub_key=sum.golang.org+033de0ae+Ac4zctda0e5eza+HJyk9SxEdh+s3Ux18htTTAD8OuAn8 \
  --in_log_origin="go.sum database tree" \
  --lookup=github.com/mjl-/gopherwatch

30446952)
github.com/mjl-/gopherwatch v0.0.1 h1:EOZWG/+uDIgb8nCVqWYOpZ3hbpn42J/LKKfe5NAxmiE=
github.com/mjl-/gopherwatch v0.0.1/go.mod h1:KQTX2sAaz/QVBIXn8ZrXhrzOOo/qz7xuB4YMPQ6VOOo=


31860928)
github.com/mjl-/gopherwatch v0.0.2 h1:ACbXgi3+VstM4i8NlYxEj5MQ32gngB0mm/Ry8II3P6I=
github.com/mjl-/gopherwatch v0.0.2/go.mod h1:TfVnLUJxhoQ+L2PPJDf35QCQRbK/zcChwo/rqFdc21E=


32762096)
github.com/mjl-/gopherwatch v0.0.3 h1:gpbqb+mLFQsXwpte4qa6XynD0cpAlbv7STimN8aWbjU=
github.com/mjl-/gopherwatch v0.0.3/go.mod h1:TfVnLUJxhoQ+L2PPJDf35QCQRbK/zcChwo/rqFdc21E=


33029064)
github.com/mjl-/gopherwatch v0.0.4 h1:g9tEahA3U7cX+YDheMVht+HQOeu6pR6ER+twOs1pwGE=
github.com/mjl-/gopherwatch v0.0.4/go.mod h1:TfVnLUJxhoQ+L2PPJDf35QCQRbK/zcChwo/rqFdc21E=


34416263)
github.com/mjl-/gopherwatch v0.0.5 h1:ojEYw9kFr71SKEusfhHXJt2/Otk43CEPXzwQwEaVSL8=
github.com/mjl-/gopherwatch v0.0.5/go.mod h1:TfVnLUJxhoQ+L2PPJDf35QCQRbK/zcChwo/rqFdc21E=


35348119)
github.com/mjl-/gopherwatch v0.0.6 h1:UTYfUT/1RVl+oo5vYEdJzJao/GQZ2GzzGf+1RD2IEic=
github.com/mjl-/gopherwatch v0.0.6/go.mod h1:TfVnLUJxhoQ+L2PPJDf35QCQRbK/zcChwo/rqFdc21E=


45852120)
github.com/mjl-/gopherwatch v0.0.7 h1:43UO5CR9a7V9BgENf0JdwW6uRWC8NibaYnBtCFUYVuQ=
github.com/mjl-/gopherwatch v0.0.7/go.mod h1:dCp4OUK+Ppss6p0zBqt2YT12eIlFhzrgCmjS4SjO+P8=


45853706)
github.com/mjl-/gopherwatch v0.0.8 h1:DW77XR789ZB9LjIIN/ZWYt9tTIHtGjiKFMtli4XRW8w=
github.com/mjl-/gopherwatch v0.0.8/go.mod h1:dCp4OUK+Ppss6p0zBqt2YT12eIlFhzrgCmjS4SjO+P8=

Contact

See Notes at www.gopherwatch.org.