vulncheck: Source returns vulns for all GOOS/GOARCH

vulncheck.Source will return all matching vulns, regardless of the
current values of GOOS and GOARCH.

cmd/govulncheck displays the GOOS/GOARCH values if there are any.

Fixes golang/go#54841.

Change-Id: I98dbb75fe631416d0b53a8d4c851ee01a2d00c6c
Run-TryBot: Jonathan Amsterdam <>
Reviewed-by: Zvonimir Pavlinovic <>
TryBot-Result: Gopher Robot <>
11 files changed
tree: 031ba661916c9f05ab9c37dc4be1b52d18f295dc
  1. client/
  2. cmd/
  3. devtools/
  4. doc/
  5. internal/
  6. osv/
  7. vulncheck/
  8. .gitignore
  9. all_test.go
  10. checks.bash
  12. go.mod
  13. go.sum
  17. tools_test.go

Go Vulnerability Management

Go Reference

This repository contains packages for accessing and analyzing data from the Go Vulnerability Database. It contains the following:

  • Package client: a client for interacting with the Go vulnerability database
  • Package vulncheck: an API for detecting vulnerabilities in Go packages
  • Command govulncheck: a CLI for detecting vulnerabilities in Go packages

Check out for more information about the Go vulnerability management system.

Privacy Policy

The privacy policy for govulncheck can be found at


Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries available at are distributed under the terms of the CC-BY 4.0 license.