runtime/go

Go runtime policy: the module proxy and checksum database, the Go vanity host, and GitHub for direct module fetches.

Reference	Kind	Latest	Architecture	Size	Publisher
runtime/go	policy	1.0.0	—	—	tinylabscom/mvm-packs (official)

Use

mvmctl pull runtime/go
mvmctl pull runtime/go@1.0.0

This pack is a policy and is not runnable: it has no kernel, root filesystem or entrypoint.

Versions

Version	Manifest SHA-256	Revoked
1.0.0	ce1ac86f67e6a9df7a1b1a46d63384fa20a30848fdd7e5967d2293bfb5ceec50	no

Policy declarations (1.0.0)

Included groups name other policies; they do not describe every effective permission.

Declaration	Value
Direct network allow	proxy.golang.org:443
Direct network allow	sum.golang.org:443
Direct network allow	index.golang.org:443
Direct network allow	go.googlesource.com:443
Direct network allow	github.com:443
Direct network allow	api.github.com:443
Direct network allow	codeload.github.com:443

Secret bindings

Binding names and allowed hosts only; a binding is not proof that a secret is required, and no secret values are stored here.

Binding	Allowed hosts
None declared	—

Publisher

Each manifest is signed keyless; manifest.sigstore.json binds it to a workflow identity (issuer https://token.actions.githubusercontent.com). Identities each version can be verified under:

• 1.0.0: https://github.com/tinylabscom/mvm-packs/.github/workflows/publish.yml@refs/heads/main