Submariner

Submariner scans Go repositories to identify Common Vulnerabilities and Exposures (CVEs) within project dependencies. It performs automated updates to resolve these vulnerabilities and commits the necessary fixes directly to the repository, ensuring that software dependencies remain secure and up-to-date without manual intervention.

Submariner is designed for DevOps engineers, security analysts, and Go developers responsible for maintaining secure software supply chains. It is particularly useful for teams managing large-scale Go codebases who need to reduce the time spent manually tracking and patching dependency-related security flaws.

To utilize Submariner, you must have a Go-based project repository and appropriate write access to the target version control system. The environment requires a configured runtime capable of executing repository scans and performing git operations to commit the generated security fixes.