Security scanning tools (gosec, govulncheck). Use when running security analysis.
This skill inherits all available tools. When active, it can use any tool Claude has access to.
Security scanning tools and usage for Go.
Use when performing security analysis or audits.
go install github.com/securego/gosec/v2/cmd/gosec@latest
# Scan all packages
gosec ./...
# JSON output
gosec -fmt=json -out=results.json ./...
# Specific rules
gosec -include=G401,G501 ./...
go install golang.org/x/vuln/cmd/govulncheck@latest
# Scan for vulnerabilities
govulncheck ./...
# JSON output
govulncheck -json ./...
# GitHub Actions
name: Security Scan
on: [push, pull_request]
jobs:
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-go@v5
- name: Run Gosec
run: |
go install github.com/securego/gosec/v2/cmd/gosec@latest
gosec ./...
- name: Run govulncheck
run: |
go install golang.org/x/vuln/cmd/govulncheck@latest
govulncheck ./...