feat: add Athens Go proxy configuration for docker, GitHub actions

Author: liamstevens

.github/workflows/go-checks.yml

@@ -13,6 +13,11 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+    - name: Configure Go environment with access to private modules
+      uses: cultureamp/go-private-modules@v1
+      with:
+        github-token: "${{ secrets.GO_PRIVATE_MODULES_TOKEN }}"
+
       - uses: actions/setup-go@v5
         with:
           go-version-file: src/go.mod
@@ -27,6 +32,11 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Configure Go environment with access to private modules
+        uses: cultureamp/go-private-modules@v1
+        with:
+          github-token: "${{ secrets.GO_PRIVATE_MODULES_TOKEN }}"
+
       - uses: actions/setup-go@v5
         with:
           go-version-file: src/go.mod
@@ -45,6 +55,11 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Configure Go environment with access to private modules
+        uses: cultureamp/go-private-modules@v1
+        with:
+          github-token: "${{ secrets.GO_PRIVATE_MODULES_TOKEN }}"
+
       - uses: actions/setup-go@v5
         with:
           go-version-file: src/go.mod

docker-compose.yml

@@ -9,3 +9,11 @@ services:
     image: buildkite/plugin-tester:v4.0.0
     volumes:
       - ".:/plugin"
+  build:
+    build:
+      context: src
+      dockerfile: Dockerfile
+      args:
+        - GONOPROXY
+        - GOPRIVATE
+        - GOPROXY

src/Dockerfile

@@ -3,6 +3,16 @@ ARG DISTROLESS_IMAGE=gcr.io/distroless/static
 
 FROM ${BUILDER_IMAGE} as builder
 
+ARG NETSKOPE_CERT
+RUN if [ "${NETSKOPE_CERT}z" != "z" ];  then \
+      echo "Installing Netskope MitM certificates" && \
+      mkdir -p /usr/local/share/ca-certificates || true && \
+      echo "${NETSKOPE_CERT}" >> /etc/ssl/certs/ca-certificates.crt && \
+      echo "${NETSKOPE_CERT}" >> /usr/local/share/ca-certificates/netskope.crt && \
+      apk --no-cache add ca-certificates && \
+      update-ca-certificates; \
+    fi
+
 # Ensure ca-certficates are up to date
 RUN update-ca-certificates
 
@@ -15,6 +25,10 @@ RUN go mod verify
 
 COPY . ./
 
+ARG GONOPROXY
+ARG GOPRIVATE
+ARG GOPROXY
+
 # build as a static binary without debug symbols
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build \
       -ldflags='-w -s -extldflags "-static"' -a \