Security testing starts with understanding vulnerabilities. The CVE website lists known software flaws. The OWASP Top Ten highlights common weaknesses. With this knowledge, we can improve our Go…

Join cybersecurity professionals at GoSec 25, happening on September 10-11, 2025 in Montreal. Discover key insights and innovations in cybersecurity.

gosec is a command-line security scanner for Go projects. It analyses Go source code by inspecting both the abstract syntax tree and SSA representation to uncover security weaknesses such as insecure coding patterns, injection risks, file and path handling issues, and cryptographic problems. The tool can be run locally in a development workflow, integrated into GitHub Actions, and used with SARIF output for code scanning pipelines. This is free and open source software. #### Key Features * Scans Go code for common security issues using pattern-based rules. * Uses SSA-based analysis to detect problems involving type conversions, slice bounds, and cryptographic usage. * Includes taint analysis to trace user-controlled data flowing into dangerous functions. * Supports multiple reporting formats including JSON and SARIF. * Integrates with GitHub Actions and GitHub code scanning workflows. * Provides a standard Go analysis package for integration with compatible tooling. **Website:** **github.com/securego/gosec** **Support:** **Developer:** securego **License:** Apache License 2.0 gosec is written in Go. Learn Go with our recommended **free books** and **free tutorials**. * * * Explore our comprehensive directory of **recommended free and open source software**. Our carefully curated collection spans every major software category. This directory is part of our ongoing series of **informative articles** for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing **this form**. ---

Go security checker. Contribute to securego/gosec development by creating an account on GitHub.

Episode 0x273 of "La Friends Connection avec Narcomed" covers various events and conferences in the field of cybersecurity. Key points include a recap of the Altitude 2025 and ITSEC conferences, as well as the acceptance of a presentation titled "Hack_Canada.exe v4 scan – Measuring Government Cybersecurity Posture: 5 Years of Attack Surface Analysis in Canada" at the Sector.ca conference. Danny Boivin shares his experience with Hackfest. Several upcoming events are mentioned, including the GoSEC 2025 conference in Montreal on September 10-11, 2025, the Cybersecurity and Personal Data Protection Colloquium in Saint-Hyacinthe on October 2, 2025, and Hackfest in Quebec on October 16-18, 2025.