awesome-golang-security
github.com/guardrailsio/awesome-golang-security ↗Awesome Golang Security resources 🕶🔐
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me articles, guides & talks resources from awesome-golang-security"
Installation instructions →What's inside
Articles, Guides & Talks
- A Go Programmer's Guide to Secure Connections
[Video] GopherCon 2018, Liz Rice.
- Attacking Go
- golang-tls
Simple Golang HTTPS/TLS Examples.
- gosea
Go Secure Example Application (GOSEA).
- Go - Secure Coding Practices
[PDF] Talk given by Sulhaedir at the OWASP Jakarta meetup.
- Hacking with Go
Hacking with Go for security professionals.
Web Framework Hardening
- beego-security-headers
beego framework filter for easy security headers management.
- gorilla/csrf
Provides Cross-Site Request Forgery (CSRF) prevention middleware for Go web applications & services.
- gorilla/securecookie
Encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
- nosurf
CSRF protection middleware for Go.
- secure
Secure is an HTTP middleware for Go that facilitates most of your security needs for web applications.
- unindexed
A drop-in replacement for
Static Code Analysis
- ChainJacking
Find which of your Go lang direct GitHub dependencies is susceptible to ChainJacking attack.
- CodeQL
A tool that lets you query your code like data, in order to find vulnerabilities and bugs. See also
- gometalinter
Concurrently runs most of the existing go linters and normalizes their output.
- gosec
Inspects source code for security problems by scanning the Go AST and matching it with a set of rules. Comes bundled in a Docker container
- safesql
Static analysis tool for Golang that protects against SQL injections. It does not seem to be actively maintained at the moment.
Private Key Infrastructure
- CloudFlare SSL
CFSSL is CloudFlare's PKI/TLS swiss army knife. It is both a command line tool and an HTTP API server for signing, verifying, and bundling TLS certificates.
Vulnerabilities and Security Advisories
- Common Vulnerabilities and Exposures
Vulnerabilities that were assigned a CVE. Covers the language and packages.
- GoCenter Security
Free vulnerability data around Go Modules
- golang-announce
The golang release mailing list. Language-specific security issues are announced here.
- National Vulnerability Database
Golang known vulnerabilities in the National Vulnerability Database.
- snyk Vulnerability DB
Commercial but free listing of known vulnerabilities in libraries.
Reporting Bugs
Hacking Playground
Showing a sample of 33 resources. View the full list on GitHub →