News for hackers. Stuff that matters.

A comment on Vulnerability Management for Go. Parent comment

Re:Vulnerability Management for Go by codelion on Tuesday September 06, 2022 @12:04PM (#32739032)
Good to see Govulncheck doing a vulnerable methods analysis for surfacing only the relevant issues. Many app sec vendors do it now for languages like Java and .NET. I originally created the vulnerable methods analysis back in 2015 - https://www.veracode.com/blog/managing-appsec/vulnerable-met... the same idea has been now implemented by WhiteSource (Mend), Snyk etc.
[ Parent | on HN ]
Re:Vulnerability Management for Go by seth123456 on Tuesday September 06, 2022 @01:49PM (#32740534)
The great thing is that when it becomes part of the toolchain it will also be available for the latest version of go as it is released.

Right now veracode is stuck at go 1.17 support - maybe this will also help being up to date for such vendors more easily

[ Parent | on HN ]