sonatype-nexus-community/nancy

[mirror] the database client and tools for the Go vulnerability database

Calculates dependencies for a Go build-target and submits the list to the Dependency Submission API

Go security checker

Allow and block list linter for direct Go module dependencies.

[mirror] The Go Vulnerability Database

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

CLI client (and Golang module) for deps.dev API. Free access to dependencies, licenses, advisories, and other critical health and security signals for open source package versions.

🚰 Static taint analysis for Go programs.

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.