risks/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Path	Synopsis
built-in
accidental-secret-leak
code-backdooring
container-baseimage-backdooring
container-platform-escape
cross-site-request-forgery
cross-site-scripting
dos-risky-access-across-trust-boundary
incomplete-model
ldap-injection
missing-authentication
missing-authentication-second-factor
missing-build-infrastructure
missing-cloud-hardening
missing-file-validation
missing-hardening
missing-identity-propagation
missing-identity-provider-isolation
missing-identity-store
missing-network-segmentation
missing-vault
missing-vault-isolation
missing-waf
mixed-targets-on-shared-runtime
path-traversal
push-instead-of-pull-deployment
search-query-injection
server-side-request-forgery
service-registry-poisoning
sql-nosql-injection
unchecked-deployment
unencrypted-asset
unencrypted-communication
unguarded-access-from-internet
unguarded-direct-datastore-access
unnecessary-communication-link
unnecessary-data-asset
unnecessary-data-transfer
unnecessary-technical-asset
untrusted-deserialization
wrong-communication-link-content
wrong-trust-boundary-content
xml-external-entity
custom
demo