log4jScanner
goreleaser
| log4jScanner | goreleaser | |
|---|---|---|
| 9 | 60 | |
| 490 | 13,100 | |
| 0.0% | 2.1% | |
| 0.0 | 9.8 | |
| about 1 year ago | about 7 hours ago | |
| Go | Go | |
| GNU General Public License v3.0 only | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
log4jScanner
- A log4j vulnerability filesystem scanner and Go package for analyzing JAR files open sourced by Google.
-
how to remidiate log4j with PDQ deploy
I've been using the PDQ scanner as well as this: https://github.com/proferosec/log4jScanner
-
Log4j2 nightmares for self hosters?
https://github.com/proferosec/log4jScanner Used this one for my network since its just a binary with no dependancies.
- Philips Hue and Log4j
- Scan a range of IP addresses for Log4j vulnerability?
- Log4jScanner - free and open source log4j vulnerability scanner for internal networkz
- Uhhh has anyone else not had to change anything for Log4j?
goreleaser
-
Show HN: Docker-phobia: Analyze Docker image size with a treemap
> This is a much faster way than setting up Github Actions to build an executable for every possible platform on every release
It's not even that hard. Just use GoReleaser.
https://goreleaser.com/
-
FOSDEM 2024 - Summary and Reflections
I also got my eyes on GoReleaser, which I will use in my (Go) projects.
- Distribuindo uma aplicação Go sem o Docker
- goreleaser: Deliver Go binaries as fast and easily as possible
- Goreleaser
-
Build an Open Source Project: Behind the Scenes
With "xq", I went even further and automated the release process using GoReleaser. To publish a new release, the only thing I need is to create and push the Git tag. The corresponding GitHub Action will trigger a release process, and GoReleaser prepares the binaries and changelog based on declared conventions. The result has a high level of predictability, and no manual work is required.
-
How to start a Go project in 2023
Things I can't live without in a new Go project in no particular order:
- https://github.com/golangci/golangci-lint - meta-linter
- https://goreleaser.com - automate release workflows
- https://magefile.org - build tool that can version your tools
- https://github.com/ory/dockertest/v3 - run containers for e2e testing
- https://github.com/ecordell/optgen - generate functional options
- https://golang.org/x/tools/cmd/stringer - generate String()
- https://mvdan.cc/gofumpt - stricter gofmt
- https://github.com/stretchr/testify - test assertion library
- https://github.com/rs/zerolog - logging
- https://github.com/spf13/cobra - CLI framework
FWIW, I just lifted all the tools we use for https://github.com/authzed/spicedb
We've also written some custom linters that might be useful for other folks: https://github.com/authzed/spicedb/tree/main/tools/analyzers
-
What is recommended build tool and process for go project that contains multiple libraries, apis and executables?
Goreleaser is nice. https://goreleaser.com/
-
Best practices for distributing and updating a Go CLI on Linux?
I use goreleaser for packaging my binaries. I'm not currently doing RPM, but it does a lot of services and if you don't hunker down on a single solution, it might help with keeping your releases up to date/in sync.
-
Looking for projects ideas for experienced devops engineers
There's some packaging issues, for example, we've always wanted to publish deb/rpm packages, but never got around to adding it to either promu or completely switching our build tooling over to GoReleaser.
What are some alternatives?
log4j-scan - A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
Task - A task runner / simpler Make alternative written in Go
log4jscanner - A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.
gron - gron, Cron Jobs in Go.
log4j-affected-db - A community sourced list of log4j-affected software
go-torch
security-advisories - Security Advisories for the Jitsi projects
godropbox - Common libraries for writing Go services/applications.
log4shell - Operational information regarding the log4shell vulnerabilities in the Log4j logging library.
hub - A command-line tool that makes git easier to use with GitHub.
Laminar - Fast and lightweight Continuous Integration
goreporter - A Golang tool that does static analysis, unit testing, code review and generate code quality report.