10 actions in 10 pieces of software · ranked by words, meaning and measured trust · 1062 ms

1. 1Golang Vulncheckverified and signedpassport

   libraryTemplum/govulncheck-actionrecord

   • Templum/govulncheck-action

     Performs vulnerability scan using govulncheck and afterwards uploads it as Sarif Report to Github

2. 2Go Vulnerability Checkverified and signedpassport

   libraryimjasonh/govulncheck-actionrecord

   • imjasonh/govulncheck-action

     Run govulncheck and annotate vulnerable dependencies and code

3. 3golang-dependency-managementverified and signedpassport

   skillsamber/cc-skills-golangrecord

   • golang-dependency-management

     Dependency management for Golang projects — go.mod and go.sum, `go get` install and upgrade flows, Minimal Version Selection, conflict resolution with replace/exclude/retract, `govulncheck` scanning of the module tree, outdated dependency and binary size auditing, vendoring, `tool` directives, and g

4. 4golang-securityverified and signedpassport

   skillsamber/cc-skills-golangrecord

   • golang-security

     Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory safety, PII in logs, STRIDE/DREAD threat modeling, plus `gosec` SAST, race detection, and fuzz testing. A

5. 5golang-pkg-go-devverified and signedpassport

   skillsamber/cc-skills-golangrecord

   • golang-pkg-go-dev

     Golang package and module lookup via `godig`, a pkg.go.dev API client (CLI + MCP server). Use for any Go/Golang library's documentation, API signatures, symbols, usage examples, which versions exist, licenses, whether a dependency has CVEs, or who imports a package — prefer this over Context7 for an

6. 6golang-safetyverified and signedpassport

   skillsamber/cc-skills-golangrecord

   • golang-safety

     Defensive Golang coding against accidental bugs — nil panics, typed-nil interfaces, `append` backing-array aliasing, silent int64-to-int32 truncation, float `==` comparison, `defer` inside loops, defensive copies of slices and maps, and usable zero values. Use when a Go program panics on a nil map w

7. 7squigglesfound in code, not yet checkedno passport yet

   MCP servercarldaws/squiggles

   • go_vulncheck

     Run govulncheck to find known vulnerabilities in dependencies. May take a while on first run.

8. 8golang-linterverified and signedpassport

   skillsamber/cc-skills-golangrecord

   • golang-linter

     golang-linter — an installable skill for AI agents.

9. 9golang-spf13-viperverified and signedpassport

   skillsamber/cc-skills-golangrecord

   • golang-spf13-viper

     Golang configuration library using spf13/viper — layered precedence (flag > env > file > KV > default), BindPFlag/BindPFlags, SetEnvPrefix + SetEnvKeyReplacer + AutomaticEnv, ReadInConfig + ConfigFileNotFoundError, Unmarshal + mapstructure struct tags, Sub for sub-trees, WatchConfig + OnConfigChange

10. 10golang-continuous-integrationverified and signedpassport

    skillsamber/cc-skills-golangrecord

    • golang-continuous-integration

      GitHub Actions CI/CD pipeline configuration for Golang projects — workflow files for test, lint, SAST, coverage and vulnerability-scan jobs, Dependabot and Renovate config files, GoReleaser release pipelines, Docker build/push, repository security settings, and AI-driven PR review. Use when setting