gosec
Gosec is a tool that detects vulnerabilities by scanning Go source codes through AST and SSA code representations. It uses pattern-based rules to find common security issues and performs spot analysis by monitoring data flow. It can also integrate with GitHub code scanning processes by outputting the results in SARIF format.
GO
gosec
80securego · Code Quality & Review
STARS9.0K
FORKS727
COMMITS0
CONTRIBUTORS0
VERSIONv2.29.0
UPDATED2 days ago
GoSecurityStatic AnalysisASTApache-2.0
Common commercial products in this category: SonarCloud, Codacy, DeepSource
What can it do?
- Scan the Go source code through AST and SSA code representations to detect security issues.
- You monitor the flow of data from user input to dangerous functions by spot analysis.
- You output the analysis results in SARIF format and integrate them with GitHub code scanning tools.