Skip to main content

Python wrapper for GO Lang static secure code analyzers

Project description

# pygostaticscanwrapper
Python wrapper for GO static analyzers

## Description
Create a python wrapper for various GO security static analyzers and
obtain the results in one place.

Following static analyzers are run:
1. [**safesql**](https://github.com/stripe/safesql)
2. [**GOASTScanner**](https://github.com/GoASTScanner/gas)

### Prerequisites
1. [GO must be installed](https://golang.org/doc/install)
2. [GOPATH Environment variable must be defined](https://github.com/golang/go/wiki/GOPATH)
3. MAC and Linux machines only

### Usage
```
Usage: python gochecker.py -p <path to code to scan> <options>
Options:
-h=Display help/usage
```

### Example
```
gaurabb$ python3 gochecker.py -p "github.com/testweb"

INFO:Installed GO version: go version go1.6.2 darwin/amd64

INFO: GOPATH is set to: /path/to/GO/Workspace/


INFO: Directory to be scanned: github.com/testweb
INFO: Found installed packages. Checking for the security static analyzers...
INFO: Checking for the [gas] package.
INFO: [gas] package is available.
INFO: Checking for the [safesql] package.
INFO: [safesql] package is available.

INFO: Atleast 1 static analyzer is available.

INFO: Running [GoASTScanner]...
INFO: Processing the results...
INFO: ISSUES DETECTED during [GoASTScanner] scan for GO project at : /src/github.com/testweb
INFO: Scan results written to: /path/to/GO/Workspace/src/github.com/testweb

INFO: Running [safesql]...
INFO: Processing the results...
INFO: NO ISSUES DETECTED during [safesql] scan for GO project at: github.com/testweb
```

### Notes
* GoASTScanner results are written to a json file in the CWD
* SafeSQL results are shown on the terminal only

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

PyGoSec-0.5.0.tar.gz (2.9 kB view hashes)

Uploaded Source

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page