# OWASP/Go-SCP

Golang Secure Coding Practices guide

Repository: https://github.com/OWASP/Go-SCP
Canonical: https://ross.abutalabs.com/products/go-scp
Homepage: https://owasp.org/www-project-go-secure-coding-practices-guide/
Language: Go
License: CC-BY-SA-4.0
License Family: other
Topics: appsec, golang
Last push: 2024-05-31T08:03:49+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3439, "days_push": 824, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 5285, forks 405 (observed 2026-08-28T04:09:14.230166+00:00)

## What it is
An OWASP guide book covering secure coding practices for web applications written in Go, adapted from the OWASP Secure Coding Practices Quick Reference Guide. It is available in PDF, Mobi, and ePub formats and provides topic-by-topic examples and recommendations for avoiding common security mistakes.

## Use cases
- learn secure coding practices in go
- avoid common security mistakes in go web apps
- owasp secure coding checklist for golang
- security guide for go developers
- reference for writing secure go applications

## When to choose
- you are developing web applications in Go and want to write secure code
- you want an OWASP-aligned security checklist with Go examples
- you are learning Go and want to build security-aware habits from the start

## When to avoid
- you need an automated security scanning or linting tool rather than a guide
- you need secure coding guidance for a language other than Go
- you need runtime protection or penetration testing tooling

## Facets
- artifact type: learning-resource
- maturity: maintenance
- function: documentation, security
- domain: security, web-development, programming-languages, tutorials
- platform: go, cross-platform
- tags: owasp, secure-coding, golang, appsec, book, web-security

## Member repositories
- OWASP/Go-SCP (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:14.230166+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:59:15.866415+00:00, confidence not recorded.
  - readme: https://github.com/OWASP/Go-SCP (fetched 2026-08-28T04:09:14.230166+00:00, sha ad84df37a107)
  - homepage: https://owasp.org/www-project-go-secure-coding-practices-guide/ (fetched 2026-08-29T08:54:02.342575+00:00, sha d3100950d6a4)
  - site_page: https://owasp.org/about (fetched 2026-08-29T08:54:02.351580+00:00, sha b21a48297b2d)
- Data as of 2026-08-30T08:39:29.467469+00:00.