{"repo":"securego/gosec","free":true,"listed":false,"github":"https://github.com/securego/gosec","clone":"git clone https://github.com/securego/gosec.git","description":"Go security checker","language":"Go","stars":8922,"topics":["golang","security","security-tools","security-automation","static-analysis","static-code-analysis"],"license":"Apache-2.0","category":"security-tools","readme_excerpt":"gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links - GitHub Action - Local installation - Quick start - Common usage patterns - Selecting rules - Output formats Features - Pattern-based rules for detecting common security issues in Go code - SSA-based analyzers for type conversions, slice bounds, and crypto issues - Taint analysis for tracking data flow from user input to dangerous functions (SQL injection, command injection, path traversal, SSRF, XSS, log injection, SMTP injection, SSTI, unsafe deserialization, open redirect) License Licensed under the Apache License, Version 2.0 (the \"License\"). You may not use this file except in compliance with the License. You may obtain a copy of the License here. Project status Installation GitHub Action You can run gosec as a GitHub action as follows: Use the versioned tag with @master which is pinned to the latest stable release. This will provide a stable behavior. Scanning Projects with Private Modules If your project imports private Go modules, you need to configure authentication so that gosec can fetch the dependencies. Set the following environment variables in your workflow: - GOPRIVATE : A comma-separated list of module path prefixes that should be considered private (e.g., github.com/your-org/ ). - GITHUB AUTHENTICATION TOKEN : A GitHub token with read access to your private repositories. Integrating with code scanning You can integrate third","default_branch":null,"files":null,"tree":[],"storefront":"/r/securego","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/securego/gosec/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}