govulncheck
Report known vulnerabilities that affect Go code. tldr-pages
On several platforms
Several platforms
Report known vulnerabilities that affect Go code. Note: ./... is a Go package pattern understood by Go tooling. It matches the current package and all packages recursively under the current directory.
Scan the current module and its dependencies for vulnerabilities
govulncheck ./...IdentifyScan a specific package
govulncheck path/to/packageIdentifyScan a Go binary instead of source code
govulncheck -mode binary path/to/binaryIdentifyExtract build information and build dependencies from a Go binary
govulncheck -mode extract path/to/binaryIdentifyScan test files as well
govulncheck -test ./...IdentifyPrint the results in a specific format
govulncheck -format text ./...IdentifyDisplay the call stacks leading to each vulnerable symbol
govulncheck -show traces ./...Identify