Repository Index

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker

Vulnerability Static Analysis for Containers

• containers
• static-analysis
• go
• kubernetes

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

• containers
• docker
• go
• golang

Go security checker

• golang
• security
• security-tools
• security-automation

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

Staticcheck - The advanced Go linter

• linters
• static-analysis
• linter
• staticcheck

Visualize call graph of a Go program using Graphviz

• callgraph
• graphviz
• visualization
• golang

🔥 Fast, strict, configurable, extensible, and beautiful linter for Go

• go
• golang
• linter
• static-analysis

A Golang tool that does static analysis, unit testing, code review and generate code quality report.

• codereview
• reporter
• golang
• golang-tools

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

Detect non-inclusive language in your source code.

• inclusive
• inclusive-language
• linter
• golang

Chronos - A static race detector for the go language

• analysis
• golang
• synchronization
• detection

The Golang linter that checks usage of github.com/stretchr/testify.

• go
• golang
• linter
• static-analysis

The standards-based Web Components multitool. Generate Custom Elements Manifests, Dev Server, LSP, and MCP for your app or design system

• custom-elements
• custom-elements-manifest
• go
• golang

gpath is a Go package to access a field by a path using reflect pacakge

• golang
• reflect
• static-analysis

Generate OpenAPI 3.1 specs from Go source code via static analysis — zero annotations, automatic framework detection

• chi
• code-generation
• echo
• fiber

Catch broken links before your readers do.

• cli
• go
• linter
• linting

Preview Go struct field-alignment savings as a diff, not a rewrite.

• cli
• go
• go-tools
• golang