Support for Go Mod and Install Proxy

[anantshri]

proxy for go install command would be good

[atharvamhaske]

can you provide some more details about this?
ig what i think is we have to add supports for go install commands in our proxy system?
cc: @anantshri @abhisek

[abhisek]

@atharvamhaske Yep.

It's a bit tricky. Unlike pip/python, npm/node where there are clearly different commands (binaries) for package management and compiler / interpreter, Go doesn't differentiate here. The go executable is a monolithic binary which handles compilation, test execution, package management (go mod) and module installation (go install ...)

Given this, we need to decide if we should wrap go binary like what we do with npm, pnpm etc. If we do, we need to handle ONLY go mod and go install using the proxy. For any other command, we have to continue executing the original Go binary.

In addition to this, we also need to check if go mod/go install supports environment based proxy configuration. In fact I think we should check this first, without which the current proxy approach won't work.

Also I am a bit reluctant to prioritise support for Go. There are not much malicious package incidents in Go. The challenges seems too high for the current threat level.