In reply to @qbit:tapenet.org
You’d probably need to make it during post patch or similar phase.. but you won’t have network access

{ lib, buildGoModule }:

buildGoModule rec {
  pname = "foo";
  version = "1.13.0";
  GOPRIVATE = "github.com/foo/*";

  src = builtins.fetchGit {
    url = "git@github.com:foo/bar.git";
    ref = "refs/tags/v${version}";
    rev = "f993f922c88345604fdea284b624a97b9a1ee604";
  };

  vendorHash = "sha256-/lx2D2sdfeyRMK/097M4SQKRlmqtPTvbFo1dwbThJ5Fs=";

  ldflags = [
    "-s"
    "-w"
    "-X"
    "github.com/foo/bar/cmd.version=${version}"
  ];

}

I have this but it doesn't seem to vendor? The vendor has is incorrect as I was hopping to get it out during the build but instead it fails because it can't access the repos

It just bailed out

error: buildGoModule: vendorHash is missing