# go: example.com/module@v1.0.0：验证模块：校验和不匹配
	下载的：h1:abc123
	go.sum：     h1:xyz789

- **ID:** `go/checksum-mismatch`
- **领域:** go
- **类别:** build_error
- **验证级别:** ai_generated
- **修复率:** 80%

## 根因

下载的模块内容与 go.sum 中记录的哈希不匹配，表明可能被篡改或损坏。

## 版本兼容性

| 版本 | 状态 | 引入 | 弃用 |
|------|------|------|------|
| 1.11 | active | — | — |
| 1.12 | active | — | — |
| 1.13 | active | — | — |
| 1.14 | active | — | — |
| 1.15 | active | — | — |
| 1.16 | active | — | — |
| 1.17 | active | — | — |
| 1.18 | active | — | — |
| 1.19 | active | — | — |
| 1.20 | active | — | — |
| 1.21 | active | — | — |
| 1.22 | active | — | — |
| 1.23 | active | — | — |

## 解决方案

1. **Clear module cache and re-download** (85% 成功率)
   ```
   go clean -modcache && go mod download
   ```
2. **Set GONOSUMCHECK to bypass verification for that module (temporary)** (70% 成功率)
   ```
   export GONOSUMCHECK=example.com/module && go mod download
   ```

## 无效尝试

- **Manually editing go.sum to match the downloaded hash** — This bypasses security; the downloaded module may be malicious or corrupted. (90% 失败率)
- **Ignoring the error with -insecure flag** — Go does not support -insecure for module verification; it will still fail. (95% 失败率)