Top 12 Go security-automation Projects

vuls

3 10,659 8.8 Go

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
gosec

19 7,441 8.8 Go

Go security checker

Project mention: Top 10 Snyk Alternatives for Code Security | dev.to | 2023-08-31

6. Gosec

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
bearer

18 1,720 9.6 Go

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Project mention: Show HN: Bearer Code Security Scanner Add Support for Java, PHP, Go, and Python | news.ycombinator.com | 2023-10-26

KubeHound

2 628 9.0 Go

Kubernetes Attack Graph

Project mention: KubeHound: Kubernetes Attack Graph | /r/blueteamsec | 2023-10-09

bomber

4 451 7.1 Go

Scans Software Bill of Materials (SBOMs) for security vulnerabilities
nosqli

1 318 1.8 Go

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
threatest

1 304 6.5 Go

Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
csaf_distribution

1 34 9.1 Go

Tools to download or provide CSAF (Common Security Advisory Framework) documents.
configmanager

2 19 5.4 Go

Config and Secret management across multiple implementations in a uniform way. Inc. AWS SecretsManager/ParameterStore, GCP Secrets, AzureKeyVault, Azure AppConfig, Hashicorp Vault (by dnitsch)
aws-utils

1 14 2.0 Go

A small collection of AWS utilities, packaged as a single standalone binary.
vault-plugin-secrets-jenkins

2 8 0.0 Go

A plugin for Hashicorp Vault to create ephemeral users and API tokens for Jenkins CI
goboundcheck

1 0 5.8 Go

Linter for Go ensuring all array and slice bounds are validated.

Project mention: Goboundcheck – Go linter validating slice/array bounds | news.ycombinator.com | 2023-06-29

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Go security-automation related posts

gosec
1 project | /r/devopspro | 28 Feb 2022
Ephemeral Jenkins Users + API Tokens using Hashicorp Vault
2 projects | dev.to | 27 Dec 2021
CI/CD SAST for Golang (Lambda)
1 project | /r/awslambda | 21 Apr 2021
Dependency management tools
1 project | /r/golang | 10 Apr 2021

Index

What are some of the best open-source security-automation projects in Go? This list will help you:

	Project	Stars
1	vuls	10,659
2	gosec	7,441
3	bearer	1,720
4	KubeHound	628
5	bomber	451
6	nosqli	318
7	threatest	304
8	csaf_distribution	34
9	configmanager	19
10	aws-utils	14
11	vault-plugin-secrets-jenkins	8
12	goboundcheck	0