Google Git
Sign in
go / vuln / 0396c4c102e274da19a8eb032d2b84198d1709c9
commit0396c4c102e274da19a8eb032d2b84198d1709c9[log] [tgz]
authorJulie Qiu <julie@golang.org>Wed Mar 23 16:46:59 2022 -0400
committerJulie Qiu <julie@golang.org>Wed Mar 23 21:17:57 2022 +0000
tree8854b0f5dc857d7035419ab9b7d2122739ae4261
parente77e5878722729461d17191b83aca1e0562bd89b [diff]
doc: split README.md contents to vulndb.md

The README.md is modified to reflect that govulncheck and the vulncheck
API now live in this repository.

Information about the vulnerability database protocol is moved to
doc/vulndb.md.

Change-Id: Id85ddb1523a8ad8894542635981a37b446a9bb2e
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/395275
Trust: Julie Qiu <julie@golang.org>
Run-TryBot: Julie Qiu <julie@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>
2 files changed
tree: 8854b0f5dc857d7035419ab9b7d2122739ae4261
  1. client/
  2. cmd/
  3. devtools/
  4. doc/
  5. internal/
  6. osv/
  7. vulncheck/
  8. .gitignore
  9. all_test.go
  10. AUTHORS
  11. checks.bash
  12. CONTRIBUTING.md
  13. CONTRIBUTORS
  14. go.mod
  15. go.sum
  16. LICENSE
  17. PATENTS
  18. README.md
  19. tools_test.go
README.md

Go Vulnerability Management

Go Reference

This repository contains the following:

  • Package client: a client for interacting with the Go vulnerability database
  • Package vulncheck: an API for detecting vulnerabilities in Go packages
  • Command govulncheck: a CLI for detecting vulnerabilities in Go packages

The code in this repository is under active development and not to be considered stable.

License

Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries available at https://storage.googleapis.com/go-vulndb/ are distributed under the terms of the CC-BY 4.0 license.