For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
Mobile US PressList your app
Vendor dashboard

govulncheck

No phone app

5.4No. 43 of 56
in Software Composition Analysis Software
  • Recognised40% of the score27
  • Phone app26% of the score0
  • Documented20% of the score45
  • Free plan14% of the score30
Free plan
Yes
Runs on
Linux
Visit site Alternatives

Summary

govulncheck is ranked #43 of 56 in software composition analysis software on Samsung Mobile US Press. It runs on Linux. There is a free plan.

govulncheck plans and pricing

All plans
Govulncheck Free Go source code or binaries · Go vulnerability database pkg.go.dev · 5 Oct 2026

Compared on software composition analysis software

Supported ecosystems
Gogo.dev
SBOM generation
Yesgo.dev
Reachability analysis
Yesgo.dev
Deployment options
self_hostedgo.dev

Facts

Purpose
Govulncheck reports known vulnerabilities that affect Go code.pkg.go.dev · 5 Oct 2026
Install
The Go docs show installing it with `go install golang.org/x/vuln/cmd/govulncheck@latest`.go.dev · 5 Oct 2026
Binary scanning
It can scan compiled Go binaries using their symbol information, but binary results omit call stacks.pkg.go.dev · 5 Oct 2026
Editor integration
The Go language server gopls integrates govulncheck analysis, and the Go docs describe use with VS Code and Vim or NeoVim via coc.nvim.go.dev · 5 Oct 2026
Output formats
Govulncheck supports streaming JSON, SARIF, and OpenVEX output.pkg.go.dev · 5 Oct 2026
Vulnerability data
By default it uses the Go vulnerability database, whose reports use the OSV schema and are reviewed and curated by the Go Security team.go.dev · 5 Oct 2026
Privacy
The package documentation says database requests contain only module paths for vulnerabilities already known to the database, not code or other properties of the program.pkg.go.dev · 5 Oct 2026
Custom database
The `-db` flag can point govulncheck to a different database using HTTP, HTTPS, or file URLs, provided it implements the documented API.go.dev · 5 Oct 2026
Analysis limits
Reflection calls are not visible to source analysis, and use of `unsafe` may cause false negatives.pkg.go.dev · 5 Oct 2026
Binary limits
Binaries built with Go versions before 1.18 are checked only for standard library vulnerabilities.pkg.go.dev · 5 Oct 2026
Editor limits
The documented editor scanning features currently do not report vulnerabilities in standard libraries or toolchains.go.dev · 5 Oct 2026
Project status
The Go vulnerability management project is described as a work in progress and under active development.go.dev · 5 Oct 2026
Support
The Go docs direct govulncheck issues and feedback to the Go issue tracker.go.dev · 5 Oct 2026

Best govulncheck alternatives

See all 20
Snyk Open Source No. 1 8.3 No phone app$25/moFOSSA No. 2 8.2 No phone app$168392.50/moEndor Labs No. 3 8.1 No phone appFreeSemgrep Supply Chain No. 4 8.0 No phone app$30/moSocket No. 5 8.0 No phone app$25/moXygeni No. 6 7.9 No phone appFree

Where it ranks on Samsung Mobile US Press

Is govulncheck yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote govulncheck

Sources