What problem does it solve?
Establishes a comprehensive, reusable security pattern framework for Go development that reduces security debt by applying OWASP-aligned practices across code, configuration, dependencies, and CI/CD workflows.
Core Features & Use Cases
- OWASP-aligned patterns: covers Access Control, Data Protection, Input Handling, Secure Design, Configuration, Dependencies, Authentication, Error Handling, Integrity, Logging, External Objects/Requests, and AI-assisted development guidance.
- Reference implementations: includes code patterns and guidance in the references folder to accelerate secure coding and review processes.
- CI/CD security hardening: prescribes security linters (e.g., govulncheck, golangci-lint, go vet), tests, and audit pipelines to enforce secure practices end-to-end.
Quick Start
Start by integrating the secure-go skill into your Go projects to enforce OWASP-based security patterns and enable automated checks across your development lifecycle.