A GitHub Action to find and annotate vulnerable Go code
-
Updated
Jun 3, 2026 - JavaScript
A GitHub Action to find and annotate vulnerable Go code
CLI vulnerability scanner powered by Vulners — search, audit, scan, offline mode
Hands-off supply-chain watchdog for dev machines: orchestrates multiple security scanners (Perplexity bumblebee + osv-scanner, govulncheck, NVIDIA SkillSpector) into one daily verdict — via Claude/Slack, desktop notification, or plain CLI.
Dependency risk scanner for Go modules that helps choose safer libraries before using them in your project
🔍 Scan vulnerabilities with a Go-based CLI tool using Vulners data for reliable JSON output, ideal for security teams and CI/CD pipelines.
A lightweight wrapper around Go's official `govulncheck` tool hat adds the ability to ignore specific vulnerabilities
Package Docker Image for Implementing Continous Integration Security with SCA, SAST, and DAST in Go-Lang
A multi-module Go workspace template (monorepo) with Task, golangci-lint v2, GoReleaser v2, distroless Docker, and govulncheck.
本文以 Checkmarx 作為商業安全掃描的基準工具,探討如何使用 govulncheck、gosec、semgrep 三種開源工具作為補充,實現 零成本擴展 和 早期發現 的安全保障策略。旨在為開發團隊提供全面的安全工具比較分析和實務應用指南。
A modern single-module Go project template with Task, golangci-lint v2, GoReleaser v2, distroless Docker, and govulncheck.
Add a description, image, and links to the govulncheck topic page so that developers can more easily learn about it.
To associate your repository with the govulncheck topic, visit your repo's landing page and select "manage topics."