GCM won't work for go repo with private modules

Version

2.4.1

Operating system

Linux

OS version or distribution

Ubuntu 22.04

Git hosting provider(s)

Azure DevOps, GitHub

Other hosting provider

No response

(Azure DevOps only) What format is your remote URL?

https://{org}.visualstudio.com

Can you access the remote repository directly in the browser?

Yes, I can access the repository

Expected behavior

I've been using ssh key on linux (note: ssh won't work on windows with go get command), after configured git url.insteadOf, GOPRIVATE, etc, I can use git clone and go get.

I would expect GCM behave the same as SSH.

Actual behavior

1. configured GOPRIVATE to include private repo (i.e. orgname.visualstudio.com/orgname/*)
2. configured git to use credentialType=oauth and credentialStore=gpg

 [credential]
       helper = /usr/local/bin/git-credential-manager
       azreposCredentialType = oauth
       credentialStore = gpg

3. go get won't authenticate against private repo

GIT_TRACE=1 go get -v orgname.visualstudio.com/orgname/projname/reponame.git/api@v0.0.39
# cd /home/xd/goroot/pkg/mod; git ls-remote https://orgname.visualstudio.com/orgname/projname/reponame
23:11:09.952938 git.c:455               trace: built-in: git ls-remote https://orgname.visualstudio.com/orgname/projname/reponame
23:11:09.953007 run-command.c:668       trace: run_command: git remote-https https://orgname.visualstudio.com/orgname/projname/reponame https://orgname.visualstudio.com/orgname/projname/reponame
23:11:09.955273 git.c:742               trace: exec: git-remote-https https://orgname.visualstudio.com/orgname/projname/reponame https://orgname.visualstudio.com/orgname/projname/reponame
23:11:09.955312 run-command.c:668       trace: run_command: git-remote-https https://orgname.visualstudio.com/orgname/projname/reponame https://orgname.visualstudio.com/orgname/projname/reponame
fatal: repository 'https://orgname.visualstudio.com/orgname/projname/reponame/' not found

4. i can use git to access dependent repo

Logs

No response

Start by reproducing the go get command with the shown GOPRIVATE, Git credential settings, and GIT_TRACE=1, then compare it with direct Git access to the Azure DevOps repository. Trace how GCM handles the private-module URL and OAuth credentials; done means go get can authenticate and fetch the dependent private repository.