Cli tools blocked by nexus firewall for security reasons

[ajasonwang]

Description

I am trying to use goframe in intranet for development, install goframe cli tools through nexus go proxy (internet access not allowed). But found that it's quarantined by nexus firewall - a security scanner, I tried many versions but still can't even get started. Please fix from your side if possible. Thanks.

Additional

Policy violations causing quarantine is: High risk CVSS score, found security vulnerability CVE-2024-41253 with severity >=7 for version v2.8.1

No response

[yzy613]

The goframe cli supports skipping TLS verification by default because it is inevitable to use self-signed TLS certificates in a development environment. In order to be compatible with such situations, it is skipped by default.

[ajasonwang]

The goframe cli supports skipping TLS verification by default because it is inevitable to use self-signed TLS certificates in a development environment. In order to be compatible with such situations, it is skipped by default.

Just wondering is there anyway for me to compile the cli binary locally, avoiding the error caused by go install, skipping tls related check by set a compile argument for example.

[yzy613]

You can download precompiled binaries from the releases page.

[gqcn]

The goframe cli supports skipping TLS verification by default because it is inevitable to use self-signed TLS certificates in a development environment. In order to be compatible with such situations, it is skipped by default.

Just wondering is there anyway for me to compile the cli binary locally, avoiding the error caused by go install, skipping tls related check by set a compile argument for example.

Hello, you can use go install github.com/gogf/gf/cmd/gf/v2@latest to process manually installation. And you can also use git clone https://github.com/gogf/gf && cd gf/cmd/gf && go install to clone the codes, compile and install locally.

More info please refer to: https://github.com/gogf/gf/tree/master/cmd/gf