Tools
gosec
securego/gosec
A Go security checker that scans source code via AST, SSA, and taint analysis to detect common vulnerabilities, usable as a CLI or GitHub Action.
Topics
Related projects
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.
grype13.3kGrype is a vulnerability scanner for container images, filesystems and SBOMs. It covers major OS and language package ecosystems, supports Docker, OCI and Singularity formats, and prioritizes risk with EPSS, KEV and OpenVEX filtering.
bandit8.4kA security linter from PyCQA that inspects Python code via AST and plugins to find common security issues and produce reports.
brakeman7.3kBrakeman is a static analysis security scanner for Ruby on Rails applications that inspects source code for vulnerabilities and reports findings in multiple formats.
zizmor6.9kzizmor is a static analysis tool for CI/CD configurations such as GitHub Actions, detecting template injection, credential leakage, excessive permissions, and other security issues.