gosec
Go security checker
About this project
gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links — GitHub Action — Local installation — Quick start — Common usage patterns — Selecting rules — Output formats Features — Pattern-based rules for detecting common security issues in Go code — SSA-based analyzers for type conversions, slice bounds, and crypto issues — Taint analysis for tracking data flow from user input to dangerous functions (SQL injection, command injection, path traversal, SSRF, XSS, log injection, SMTP injection, SSTI, unsafe deserialization, open redirect) License Licensed under the Apache License, Version 2.0 (the…
Technologies
Project health
GitHub
Reviews
Built by
Maintain securego/gosec? Claiming verifies admin access through your GitHub account and gives you control of this listing.