golang.org/x/vuln

implement -scan=gomod mode for govulncheck to scan only through go.mod filesvulncheck or vulndb

#80800 opened 5 days ago by jeanbza

govulncheck should only report stdlib vulnerabilities when checking a main packageFixPendingvulncheck or vulndb

#80603 opened 2 weeks ago by rolandshoemaker

govulncheck -test does not seem to work on internal tests (only external tests)NeedsFixhelp wantedvulncheck or vulndb

#80601 opened 2 weeks ago by jeanbza

govulncheck does not handle broad stdlib vulns wellNeedsDecisionvulncheck or vulndb

#80317 opened 1 month ago by FiloSottile

govulncheck SARIF startLine should point to correct location in go.modNeedsInvestigationvulncheck or vulndb

#80255 opened 1 month ago by mabrarov

add vulnerability-aware fix and dry-run modes to govulncheckFeatureRequestNeedsInvestigationvulncheck or vulndb

#79896 opened 2 months ago by betterlmy

OOM errors in CI due to expensive x/tools/go/callgraph representationBugReportNeedsDecisionvulncheck or vulndb

#79053 opened 3 months ago by Merovius

govulncheck false positive traces http.Server.Shutdown to pgproto3 through unrelated code path (VTA imprecision)NeedsInvestigationvulncheck or vulndb

#78216 opened 4 months ago by hskiba

slow publication of vulnerabilities fixed in Go point releasesNeedsInvestigationvulncheck or vulndb

#77409 opened 6 months ago by AGWA

govulncheck -format=sarif generates invalid sarif with duplicate tagsNeedsInvestigationvulncheck or vulndb

#75890 opened 10 months ago by pau-hedgehog

add support to ignore unfixed vulnarablilitiesFeatureRequestNeedsInvestigationvulncheck or vulndb

#74794 opened 1 year ago by beatrausch

vulncheck high network usageNeedsInvestigationvulncheck or vulndb

#74129 opened 1 year ago by chezgi

module import path in OpenVEX purls should not be escapedNeedsInvestigationvulncheck or vulndb

#72827 opened 1 year ago by puerco

default govulncheck output is very long vulncheck or vulndb

#71415 opened 2 years ago by julieqiu

improve documentationDocumentationvulncheck or vulndb

#69519 opened 2 years ago by zpavlinovic

OpenVEX report lacks affected productvulncheck or vulndb

#68152 opened 2 years ago by macedogm

enhance deduping of similar tracesNeedsInvestigationvulncheck or vulndb

#68100 opened 2 years ago by hyangah

TestGoModTidy failuresNeedsInvestigationvulncheck or vulndb

#67003 opened 2 years ago by gopherbot

govulncheck integration with go (mod) and GOPROXYNeedsInvestigationvulncheck or vulndb

#65720 opened 2 years ago by pboguslawski

add fingerprinting for binary modevulncheck or vulndb

#64716 opened 2 years ago by zpavlinovic

unrecognized failuresNeedsInvestigationvulncheck or vulndb

#62885 opened 2 years ago by gopherbot

use govulncheck in bazelNeedsInvestigationvulncheck or vulndb

#61494 opened 3 years ago by ukai

reduce noise in example tracesvulncheck or vulndb

#61305 opened 3 years ago by tatianab

add support for silencing vulnerability findings with govulncheckNeedsFixvulncheck or vulndb

#61211 opened 3 years ago by julieqiu

display vuln summaries in integrationsNeedsInvestigationpkgsitevulncheck or vulndb

#61201 opened 3 years ago by tatianab

update JSON output to show all locations of a vulnerable symbolNeedsInvestigationvulncheck or vulndb

#59927 opened 3 years ago by julieqiu

fix shellcheck error in all.bash for verify_header NeedsFixvulncheck or vulndb

#59733 opened 3 years ago by julieqiu

support XCOFF files NeedsInvestigationOS-AIXvulncheck or vulndb

#59730 opened 3 years ago by julieqiu

add support for suppressing vulnerabilities by IDFeatureRequestNeedsInvestigationvulncheck or vulndb

#59507 opened 3 years ago by bentcoder

delay reporting vulnerabilities for N days NeedsInvestigationUXvulncheck or vulndb

#56157 opened 3 years ago by adamdecaf

reports could exclude calls with unaffected argumentsNeedsInvestigationvulncheck or vulndb

#54889 opened 3 years ago by prattmic