0
Other developers are checking in code created with go mod vendor
, and I'd like to verify the integrity of the module files they commit inside vendor/
, so as to properly do code reviews.
I expected go mod verify
to do this, but it only checks the package cache at $GOPATH/pkg
, not vendored modules.
What is the right way to do this?