Unable to Install on Fedora 41

[mauricioharley]

Summary

I was unable to install Gosec on its latest version as of this issue is being submitted (2.22.0) on my Fedora 41 box. The installation hanged for some minutes on "oogle.golang.org/grpc v1.67.1", but moved further to the following steps. Then, it threw some kind of traceback and failed.

Steps to reproduce the behavior

1. Install Go version 1.23.4
2. Try to install Gosec in the documented way: go install github.com/securego/gosec/v2/cmd/gosec@latest

gosec version

v2.22.0

Go version (output of 'go version')

go version go1.23.4 linux/amd64

Operating system / Environment

Fedora 41 (kernel 6.12.8-200.fc41.x86_64)

Expected behavior

Gosec to get installed.

Actual behavior

$ go install github.com/securego/gosec/v2/cmd/gosec@latest
go: downloading github.com/securego/gosec/v2 v2.22.0
go: downloading github.com/google/generative-ai-go v0.19.0
go: downloading google.golang.org/api v0.214.0
go: downloading github.com/ccojocar/zxcvbn-go v1.0.2
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/gookit/color v1.5.4
go: downloading golang.org/x/sync v0.10.0
go: downloading github.com/xo/terminfo v0.0.0-20210125001918-ca9a967f8778
go: downloading google.golang.org/protobuf v1.36.1
go: downloading github.com/googleapis/gax-go/v2 v2.14.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20241209162323-e6fa225c2576
go: downloading cloud.google.com/go/ai v0.8.0
go: downloading google.golang.org/grpc v1.67.1
go: downloading cloud.google.com/go v0.116.0
go: downloading cloud.google.com/go/longrunning v0.5.7
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20241118233622-e639e219e697
../../go/pkg/mod/cloud.google.com/go/[email protected]/autogen/longrunningpb/operations.pb.go:29:2: google.golang.org/genproto/googleapis/[email protected]: invalid version: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/461a63b9772f509ad6dbec285b16bb3603d20cbf5b324c1b0b97e0527058b46e: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 914 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/cloud.google.com/go/[email protected]/autogen/longrunningpb/operations.pb.go:30:2: reading google.golang.org/grpc/go.mod at revision v1.67.1: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/6bc32f050d801af642e55338f0b2959a44689c94c534a4510e457234d980af67: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 15668 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/cloud.google.com/go/[email protected]/autogen/longrunningpb/operations.pb.go:31:2: reading google.golang.org/grpc/go.mod at revision v1.67.1: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/6bc32f050d801af642e55338f0b2959a44689c94c534a4510e457234d980af67: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 15668 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/cloud.google.com/go/[email protected]/autogen/longrunningpb/operations.pb.go:32:2: reading google.golang.org/grpc/go.mod at revision v1.67.1: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/6bc32f050d801af642e55338f0b2959a44689c94c534a4510e457234d980af67: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 15668 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/github.com/googleapis/gax-go/[email protected]/apierror/internal/proto/error.pb.go:27:2: google.golang.org/genproto/googleapis/[email protected]: invalid version: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/461a63b9772f509ad6dbec285b16bb3603d20cbf5b324c1b0b97e0527058b46e: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 914 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/github.com/googleapis/gax-go/[email protected]/apierror/apierror.go:44:2: reading google.golang.org/api/go.mod at revision v0.214.0: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/14bb952cc8902e20fb82cb08a9d29b90b010f5d6d0d3737e9cb402b3b57a25b5: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 2256 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/github.com/googleapis/gax-go/[email protected]/apierror/apierror.go:45:2: google.golang.org/genproto/googleapis/[email protected]: invalid version: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/461a63b9772f509ad6dbec285b16bb3603d20cbf5b324c1b0b97e0527058b46e: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 914 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/github.com/googleapis/gax-go/[email protected]/header.go:42:2: reading google.golang.org/grpc/go.mod at revision v1.67.1: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/6bc32f050d801af642e55338f0b2959a44689c94c534a4510e457234d980af67: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 15668 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/cloud.google.com/go/[email protected]/autogen/auxiliary.go:21:2: reading google.golang.org/api/go.mod at revision v0.214.0: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/14bb952cc8902e20fb82cb08a9d29b90b010f5d6d0d3737e9cb402b3b57a25b5: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 2256 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/cloud.google.com/go/[email protected]/autogen/doc.go:95:2: reading google.golang.org/api/go.mod at revision v0.214.0: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/14bb952cc8902e20fb82cb08a9d29b90b010f5d6d0d3737e9cb402b3b57a25b5: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 2256 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/cloud.google.com/go/[email protected]/autogen/operations_client.go:34:2: reading google.golang.org/api/go.mod at revision v0.214.0: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/14bb952cc8902e20fb82cb08a9d29b90b010f5d6d0d3737e9cb402b3b57a25b5: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 2256 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/cloud.google.com/go/[email protected]/autogen/operations_client.go:35:2: reading google.golang.org/api/go.mod at revision v0.214.0: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/14bb952cc8902e20fb82cb08a9d29b90b010f5d6d0d3737e9cb402b3b57a25b5: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 2256 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output
../../go/pkg/mod/cloud.google.com/go/[email protected]/autogen/operations_client.go:36:2: reading google.golang.org/api/go.mod at revision v0.214.0: git fetch -f origin refs/heads/:refs/heads/ refs/tags/:refs/tags/ in /home/mharley/go/pkg/mod/cache/vcs/14bb952cc8902e20fb82cb08a9d29b90b010f5d6d0d3737e9cb402b3b57a25b5: exit status 128:
error: RPC failed; curl 92 HTTP/2 stream 5 was not closed cleanly: CANCEL (err 8)
error: 2256 bytes of body are still expected
fetch-pack: unexpected disconnect while reading sideband packet
fatal: early EOF
fatal: fetch-pack: invalid index-pack output

[ccojocar]

I am sorry, I can reproduce it on my side. Can you install any other Go modules?

It looks like something related to your system.

[mauricioharley]

I repeated the installation command and it worked without problems this time. However, the utility is not on the PATH. Tips?

$ go install github.com/securego/gosec/v2/cmd/gosec@latest
go: downloading google.golang.org/api v0.214.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20241209162323-e6fa225c2576
go: downloading google.golang.org/grpc v1.67.1
go: downloading golang.org/x/sys v0.28.0
go: downloading golang.org/x/net v0.33.0
go: downloading golang.org/x/text v0.21.0
go: downloading golang.org/x/oauth2 v0.24.0
go: downloading cloud.google.com/go/auth/oauth2adapt v0.2.6
go: downloading cloud.google.com/go/compute/metadata v0.6.0
go: downloading github.com/google/s2a-go v0.1.8
go: downloading cloud.google.com/go/auth v0.13.0
go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.4
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54.0
go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0
go: downloading golang.org/x/time v0.8.0
go: downloading golang.org/x/crypto v0.31.0
go: downloading go.opentelemetry.io/otel/trace v1.29.0
go: downloading go.opentelemetry.io/otel v1.29.0
go: downloading go.opentelemetry.io/otel/metric v1.29.0
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading github.com/go-logr/logr v1.4.2
go: downloading github.com/go-logr/stdr v1.2.2
$ 
$ gosec version
bash: gosec: command not found...

[ccojocar]

It should be in your $GOPATH/bin.