govulncheck
« Back to VersTracker
Description:
Database client and tools for the Go vulnerability database
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: security vulnerability-scanning golang devsecops dependency-analysis
Install: brew install govulncheck
About:
Govulncheck is a command-line tool that scans Go modules for known vulnerabilities using the Go Vulnerability Database. It analyzes your code's dependency call graph to determine if your application is actually affected by a vulnerability, providing actionable remediation guidance.
Key Features:
  • Call graph analysis to verify exploitability
  • Integration with Go module ecosystem
  • Actionable vulnerability remediation guidance
  • Machine-readable output formats
Use Cases:
  • CI/CD pipeline security scanning
  • Dependency audit before production deployment
  • Compliance and security posture assessment
Alternatives:
  • nancy – Uses different vulnerability database and lacks call graph analysis
  • snyk – Broader language support but requires account and focuses on commercial features
Version History
Detected Version Rev Change Commit
Feb 12, 2026 11:11am 3 REVISION_ONLY 1efbfd62
Sep 11, 2025 11:45am 2 VERSION_BUMP 752b24b4
Jan 13, 2025 7:20pm 0 VERSION_BUMP f1786196
Jan 13, 2025 4:59pm 0 VERSION_BUMP 3dd53f44