go.dev/data/security/foundations.yaml

links:
  - title: Secure by design
    content: |
      <ul>
        <li>Memory safety and garbage collection prevent most common vulnerabilities</li>
        <li>Safe by default APIs in the standard library</li>
        <li>Use safe libraries from Google like <span class="link">github.com/google/safehtml</span></li>
      </ul>
    url: https://github.com/google/safehtml
    icon: /images/icons/secure.svg
    cta: Learn more
  - title: Enterprise crypto
    content: |
      <ul>
        <li>Included in the std library</li>
        <li>Maintained by the Go team</li>
      </ul>
    url: https://www.google.com
    icon: /images/icons/crypto.svg
    cta: Learn more
  - title: Supply chain security
    content: |
      <ul>
        <li>Ecosystem of 3rd party modules with a culture of limited dependencies</li>
        <li>Tamper detection via the Go checksum database</li>
        <li>Availability via the Go module proxy </li>
      </ul>
    url: https://www.google.com
    icon: /images/icons/supply_chain_security.svg
    cta: Learn more
  - title: Swiftly handle security issues
    content: |
      <ul>
        <li>Report bugs directly to the Go team</li>
        <li>Leverage community resources like Snyk and Nancy</li>
      </ul>
    url: https://www.google.com
    icon: /images/icons/swift_issues.svg
    cta: Learn more