search

Coderockr / backstage

Coderockr's recommended tools and components for development
8 stars 1 forks source link

gosec - Golang Security Checker #174

Open lucassabreu opened 2 years ago

lucassabreu commented 2 years ago

Inspects source code for security problems by scanning the Go AST.

gosec in a nutshell Gosec will analyze our source code and try to find issues or vulnerabilities. Such vulnerabilities could be:

  • Hardcoded credentials
  • Security issue
  • Weak cryptography
  • Memory aliasing
  • Unhandled errors
  • and many more Furthermore, gosec will tell you both the Confidence and the Severity of the issue found. Finally, note that gosec will also report non-compiling code

https://github.com/securego/gosec https://systemweakness.com/scanning-go-source-for-vulnerabilities-5f29773ecc9d