What version of Go are you using (go version)?

1.14

Does this issue reproduce with the latest release?

N/A

What operating system and processor architecture are you using (go env)?

Windows & Mac 64-bit each

What did you do?

tried to set all the environment variables I could think of

What did you expect to see?

To not reach externally

What did you see instead?

To reach only internally

I'm working at a company where we are trying to bring GoLang in. One of the requirements by security is that it cannot reach externally to sites like github.com, gitlab.com, etc. when users request for new modules. Another situation that I've been told to make sure we avoid is users doing just go get and updating to the latest version of go automatically that way. So commands like this:

go get github.com/group/project

Should not pull in the module from github.com. The request is that it pulls in the resource from an internal repository instance that we have setup.

I've tried to setup the variables GOPROXY, GONOPROXY, and GOPRIVATE, but none are working unless I specifically put the modules in the go.mod file.

In summary, how can I setup go get to only ever point to the internal repository 100% of the time, and return a 404 when a specific module supplied does not exist? Note: we cannot rely on the .gitconfig file since there's never a guarantee that only github.com and gitlab.com are where the resources are pulled from.