gosca

module

v0.4.2 Latest Latest Go to latest Published: May 5, 2022 License: MIT

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

GoSCA scans a Go project for vulnerable dependencies.

./gosca -w /path/to/workdir

Running

Select your platform for download

go build -o gosca cmd/gosca/main.go

or for cross platform builds

sh package.sh

Path	Synopsis
assets
cmd
gosca
hvulndb Handle assets/vulndb Add CVSS score and Severity to assets/vulndb/.yaml according https://nvd.nist.gov/vuln/detail/[CVE_ID] Skip if not set CVE in .yaml	Handle assets/vulndb Add CVSS score and Severity to assets/vulndb/.yaml according https://nvd.nist.gov/vuln/detail/[CVE_ID] Skip if not set CVE in .yaml
pkg
checker
config
output
parser
util/file
util/utils