Well simply speaking the govulncheck tool has adopted the OSV format which is relatively new and for quite some time, SARIF format has become the defacto standard for Security aggregators. Hence I decided to use the Go's vulncheck library to get the vulnerabilities and convert them into the SARIF format. This tool is mostly for educational purposes, as I wanted to learn about the hurdles tool adopters might have when thinking about supporting SARIF outputs.
This repository has been archived by the owner on Aug 14, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
A tool to scan for publicly known Go vulnerabilities using the Go vulnerability database
License
tjgurwara99/vulnny
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
A tool to scan for publicly known Go vulnerabilities using the Go vulnerability database
Resources
License
Stars
Watchers
Forks
Packages 0
No packages published