code.gosecgosec Go SAST
Runs gosec over each Go module (go.mod). gosec type-checks packages through the Go toolchain (`go list`), which may download missing modules but never compiles or runs the target's code. Skipped when there is no go.mod.
- Engine
- Wrapped scanner
- Wraps
gosec- Targets
- Codebase
- Areas
- Security
- Runs
- By default, when the target applies
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit . --only code.gosecWraps gosec. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.