add git to the go fetcher

builder/default.nix

@@ -9,6 +9,7 @@
 , cacert
 , pkgs
 , pkgsBuildBuild
+, git
 }:
 let
 
@@ -56,7 +57,7 @@ let
       name = "${baseNameOf goPackagePath}_${version}";
       builder = ./fetch.sh;
       inherit goPackagePath version;
-      nativeBuildInputs = [ go jq ];
+      nativeBuildInputs = [ go jq git ];
       outputHashMode = "recursive";
       outputHashAlgo = null;
       outputHash = hash;

builder/fetch.sh

@@ -2,6 +2,8 @@ source $stdenv/setup
 
 export HOME=$(mktemp -d)
 
+git config --global http.sslCAInfo $SSL_CERT_FILE
+
 # Call once first outside of subshell for better error reporting
 go mod download "$goPackagePath@$version"