go-deps-security-upgrade

Official

Group Go dep upgrades for secure, traceable fixes

Authorfission
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Run a grouped, bisectable Go dependency security sweep on the Fission repo. Use when the user asks to upgrade outdated/vulnerable Go dependencies, run a dep security pass, or process CVE findings from govulncheck. Produces one commit per logical dependency group on a dedicated branch so failures are attributable and revertable.

Core Features & Use Cases

  • Baseline security scan with govulncheck to identify vulnerabilities in Go dependencies.
  • Grouped upgrades: upgrade related dependencies in logically separable commits on dedicated branches for traceability.
  • Reproducible workflow: each commit corresponds to a specific vulnerability group, enabling precise bisecting and rollback.

Quick Start

Run the baseline govulncheck, then start the grouped Go dependency upgrade workflow on your repository.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: go-deps-security-upgrade
Download link: https://github.com/fission/fission/archive/main.zip#go-deps-security-upgrade

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.