About gosec
Gosec scans Go source code for security problems by examining its abstract syntax tree (AST), a structured representation of the code. This allows a static analysis tool to inspect program structure without running the application. Gosec is intended to identify potential security issues in Go projects during development, when findings can be reviewed before software is deployed. The supplied information does not list the rules it applies, the vulnerability categories it checks, or how it reports findings. It also does not claim to detect every security problem. Gosec’s documented role is static source analysis for Go using AST scanning. Developers should treat its results as one input to security review and consult specific rule coverage and configuration details, which are not given in the available description.
Categories
Platforms
Website & Downloads
Trusted package or store listing
Related software
- 0patch Agent — 0patch Agent is a security utility for applying micropatches to vulnerabilities in many programs.
- 3va — 3va is a JavaScript and TypeScript runtime built on the V8 engine.
- A1RunGuard — A1RunGuard is a Windows process firewall for controlling which programs can run.
- AES Crypt — AES Crypt is file-encryption software for Windows that integrates with the desktop and also includes a command-line program.
- Actifile Agent — Actifile Agent is an endpoint tool connected to a software platform for discovering, monitoring, and protecting sensitive data.
- Active Directory Rights Management Services Client 2.1 — Active Directory Rights Management Services Client helps protect access to and use of information handled by compatible applications.
