Package gosec: Information
Source package: gosec
Version: 2.22.4-alt1
Build time: May 21, 2025, 09:21 PM in the task #384702
Category: Development/Other
Report package bugHome page: https://securego.io
License: Apache-2.0
Summary: Inspects source code for security problems by scanning the Go AST and SSA code representation
Description:
Gosec is a static analysis tool that scans Go source code to identify potential security vulnerabilities by analyzing the AST (Abstract Syntax Tree) and SSA (Static Single Assignment) representations. It detects issues like: - Hardcoded credentials - SQL injection risks - Insecure file permissions - Weak cryptographic algorithms - Improper error handling - Other common Go security pitfalls.
Maintainer: Ivan Khanas