go-deps

Automate Go module dependency tidying, updating, vendoring, and auditing.

1|1|Updated Mar 6, 2026

Search Tags:#dependencies #go #update #vendor #security-audit #tidy #go-mod

Ready to run

npx skills add https://github.com/dennisonbertram/go-agent-harness --skill go-deps

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: go-deps
Source: https://github.com/dennisonbertram/go-agent-harness/tree/main/skills/go-deps
Command: npx skills add https://github.com/dennisonbertram/go-agent-harness --skill go-deps

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps developers manage Go module dependencies by providing a unified workflow for tidying, updating, vendoring, and auditing, reducing breakages and security risks.

Core Features & Use Cases

Dependency tidying and verification with go mod tidy and go mod verify.
Dependency updates and vendor management, including selective upgrades and re-vendoring.
Security and compatibility analysis using module graphs and govulncheck to surface vulnerabilities.

Quick Start

Run this skill to tidy, update, and audit Go modules in your project.

Frequently Asked Questions about go-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate Go module dependency updates and security audits?▼

You can automate Go module updates and security audits by applying a unified workflow that runs go mod tidy, executes selective upgrades, and performs vulnerability checks using govulncheck to ensure a safe, validated dependency graph.

What is the best way to tidy and verify Go module dependencies in a project?▼

The best way to tidy and verify Go modules is to execute go mod tidy to clean up the go.mod file and then run go mod verify to validate that the downloaded modules match the expected cryptographic hashes, ensuring dependency integrity.

How does govulncheck work with go mod graph for security analysis?▼

Govulncheck works with go mod graph by analyzing your project's dependency tree to identify known vulnerabilities. It checks your actual code call paths against vulnerability databases to surface only the security risks that affect your application.

Can I selectively upgrade Go module dependencies and re-vendor them safely?▼

Yes, you can selectively upgrade specific Go module dependencies and safely re-vendor them. This process includes updating targeted modules in go.mod, running vendor management commands to sync the vendor directory, and validating compatibility across the module graph.

Why do I need to run go mod tidy before updating Go module dependencies?▼

Running go mod tidy before updating Go module dependencies ensures your go.mod and go.sum files accurately reflect your project's current import graph. This cleaning step removes unused dependencies and adds missing ones, preventing graph analysis errors and update breakages.