tree 26e775442116eaa897c295196b3dc9a13f155958
parent cab701b0afc6f1cabc8783be3bf3042167f1642f
author Jonathan Amsterdam <jba@google.com> 1638533840 -0500
committer Jonathan Amsterdam <jba@google.com> 1638568478 +0000

internal/worker: use HEAD requests to pkgsite

When we test for the existence of a module, we just need the status
code; there's no need to read the entire page.

Add a test against the real pkgsite to confirm.

The test revealed that although it seems we were able to use the
internal pkgsite staging environment, in fact we were always getting
200s because we were fetching a login page. We may add auth in the
future, but for now drop the ability to access anything other than the
public pkgsite.

Change-Id: I8934e17c76aad6aa36bd974a813f300b02549491
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/368856
Trust: Jonathan Amsterdam <jba@google.com>
Run-TryBot: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Julie Qiu <julie@golang.org>