securego/gosec

Health v2 · maintenance only

Adoption not part of the score

8933 stars · 705 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

gosec is a security scanner for Go source code that inspects the AST and SSA representations to detect common security problems. It includes pattern-based rules, SSA-based analyzers, and taint analysis for issues like SQL injection, command injection, and SSRF.

Use cases

• scan go code for security vulnerabilities
• find hardcoded credentials in go source
• detect sql injection in go projects
• run security checks in ci pipeline
• static analysis for go security issues
• enforce secure go coding guidelines

When to choose

• you maintain a Go codebase and want automated security scanning
• you need SAST integrated into GitHub Actions or CI pipelines
• you want taint analysis for injection vulnerabilities in Go

When to avoid

• you need dynamic or runtime security testing rather than static analysis
• your project is not written in Go
• you need binary or dependency vulnerability scanning rather than source code analysis

Facets

cli-tool · maturity active

security vulnerability-scanning linter static-site-generator security developer-tools go cli windows static-analysis sast golang taint-analysis github-action ci-cd command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="securego/gosec")