Software Architecture in Golang: Vulnerability Management with govulncheck
Welcome to another Software Architecture in Go/Golang video, in this video I cover Security specifically the new support for vulnerability management announced by the Go team.
This vulnerability management is built around a vulnerability database consisting of known bugs coming from:
■ NVD: National Vulnerability Database,
■ GHSA: GitHub Security Advisory,
■ Reports sent by Go package maintainers and
■ Fixed issues by the Go project.
Specifically I focus on the new tool called govulncheck that allows you to detect vulnerabilities in a better way, this tool supports scanning binaries and source code.
== Relevant links
■ Software Architecture in Golang: Security - Dependencies: • Software Architecture in Golang: Secu...
■ Example code: https://github.com/MarioCarrion/video...
■ Software Architecture in Go/Golang: • Software Architecture and System Desi...
■ x/vuln: govulncheck should report vulnerabilities for all GOOS/GOARCH values: https://github.com/golang/go/issues/5...
■ Vulnerability Management for Go: https://go.dev/blog/vuln
■ Blog: https://mariocarrion.com/2022/09/23/g...
== All Go/Golang Playlists
■ Building Microservices in Go/Golang: • Building Microservices in Golang/Go
■ Go/Golang Tools and Packages: • Golang/Go Tools and Packages
■ Learning Concurrency Patterns in Go/Golang: • Learning Go/Golang Concurrency Patterns
■ Learning Go/Golang : • Learning Go/Golang
■ Learning Relational Databases in Go/Golang: • Learning Go/Golang: Relational Databases
■ Software Architecture in Go/Golang: • Software Architecture and System Desi...
■ Testing in Go/Golang: • Testing in Golang/Go
== Socials
■ / mariocarrion
■ / mario.carrion
■ / mariocarrion
00:00 - Introduction to the Vulnerability Management in Golang using govulncheck
01:04 - Standard Library Bug detection using govulncheck
04:11 - Third Party Library Bug detection using govulncheck
05:20 - Third Party Library with Bug but not used using govulncheck
07:32 - Conclusion of the Vulnerability Management in Golang using govulncheck
=== Who am I?
Hello👋🏼! I'm Mario, a Hands-on Software Architect and Lead Backend Engineer with decades of professional experience building all kinds of software including on-premise Industrial Automation Systems, Linux Accessibility Desktop and Browser Components as well as Distributed Advertising Microservices.
The content I share includes different topics I've learned while working for small startups and large companies including the processes I've followed over the years for successfully delivering complex enterprise systems from start to end.
Subscribe if you like Software Development, Software Architecture and Systems Design!
Keep it up. Don't give up!
#golang #secops #softwarearchitecture
=== Our Vlog Channel
/ rubycarrion
=== Our affiliate links below
■ My Amazon Storefront: https://www.amazon.com/shop/rubycarrion
■ Shop my IG posts on my shopLTK page: https://www.shopltk.com/explore/RubyC...
■ Vlog camera: Sony RX100 VII https://amzn.to/3qQfvMc
■ Other vlog cameras and gear: https://rubycarrion.com/vlogcamerasan...
■ Shop through my links to support the channel: https://rubycarrion.com/shop-my-links/
■ Get a 30 day FREE Trial of Epidemic Sound: https://www.epidemicsound.com/referra...
■ Join Rakuten for FREE and get $30 when you spend $30: https://www.rakuten.com/r/RUBYRA132?e...
DISCLAIMER: Some of the links shared in the description are affiliate links. As a member of these affiliate programs, I earn a small commission from your purchases at no additional cost to you. I appreciate your support! 💖