README
¶
Go Vulnerability Management
This repository contains packages for accessing and analyzing data from the Go Vulnerability Database.
See https://go.dev/security/vuln for more information about the Go vulnerability management system.
Privacy Policy
The privacy policy for govulncheck can be found at
https://vuln.go.dev/privacy.
License
Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.
Database entries available at https://vuln.go.dev are distributed under the terms of the CC-BY 4.0 license.
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
govulncheck
command
Govulncheck reports known vulnerabilities that affect Go code.
|
Govulncheck reports known vulnerabilities that affect Go code. |
|
govulncheck/integration/k8s
command
|
|
|
Package internal contains functionality for x/vuln.
|
Package internal contains functionality for x/vuln. |
|
client
Package client provides an interface for accessing vulnerability databases, via either HTTP or local filesystem access.
|
Package client provides an interface for accessing vulnerability databases, via either HTTP or local filesystem access. |
|
derrors
Package derrors defines internal error values to categorize the different types error semantics supported by x/vuln.
|
Package derrors defines internal error values to categorize the different types error semantics supported by x/vuln. |
|
govulncheck
Package result contains the JSON output structs for govulncheck.
|
Package result contains the JSON output structs for govulncheck. |
|
osv
Package osv implements the Go OSV vulnerability format (https://go.dev/security/vuln/database#schema), which is a subset of the OSV shared vulnerability format (https://ossf.github.io/osv-schema), with database and ecosystem-specific meanings and fields.
|
Package osv implements the Go OSV vulnerability format (https://go.dev/security/vuln/database#schema), which is a subset of the OSV shared vulnerability format (https://ossf.github.io/osv-schema), with database and ecosystem-specific meanings and fields. |
|
scan
Package govulncheck provides functionality to support the govulncheck command.
|
Package govulncheck provides functionality to support the govulncheck command. |
|
semver
Package semver provides shared utilities for manipulating Go semantic versions.
|
Package semver provides shared utilities for manipulating Go semantic versions. |
|
vulncheck
Package vulncheck detects uses of known vulnerabilities in Go programs.
|
Package vulncheck detects uses of known vulnerabilities in Go programs. |
|
vulncheck/internal/gosym
Package gosym implements access to the Go symbol and line number tables embedded in Go binaries generated by the gc compilers.
|
Package gosym implements access to the Go symbol and line number tables embedded in Go binaries generated by the gc compilers. |
Click to show internal directories.
Click to hide internal directories.