lucascs@protonmail.com Lucas C.S. govulncheck is the Go team's vulnerability scanner. Unlike a scanner that only compares a dependency list against a database, it performs static reachability analysis: it reports a vulnerability only when the affected function is actually reachable from your code, which typically cuts the raw dependency-level findings by half. It reads the Go vulnerability database at vuln.go.dev and can analyse either sources or an already-built binary. https://github.com/golang/vuln/issues golang/vuln