triage-go-vulnerabilities

Analyze Go dependency vulnerabilities with govulncheck and map remediation strategies.

2|Updated Mar 29, 2026

Search Tags:#security #vulnerability #remediation #go #dependency #govulncheck

Ready to run

npx skills add https://github.com/NagyVikt/codex-plugins --skill triage-go-vulnerabilities

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: triage-go-vulnerabilities
Source: https://github.com/NagyVikt/codex-plugins/tree/main/plugins/docker/skills/triage-go-vulnerabilities
Command: npx skills add https://github.com/NagyVikt/codex-plugins --skill triage-go-vulnerabilities

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the complexity of managing Go dependency vulnerabilities by providing a structured, validation-first workflow that distinguishes between reachable risks and noise.

Core Features & Use Cases

Reachability Analysis: Uses govulncheck to determine if vulnerable code paths are actually reachable in your application.
Remediation Mapping: Categorizes findings into actionable steps like immediate patching, scheduled upgrades, or risk mitigation.
Validation Guardrails: Enforces mandatory linting and testing after every remediation attempt to prevent breaking changes.

Quick Start

Run the triage-go-vulnerabilities skill to scan the current project and generate a security report table.

Frequently Asked Questions about triage-go-vulnerabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I check if a Go dependency vulnerability is actually reachable in my code?▼

To check if a Go dependency vulnerability is reachable, you need to analyze reachability using govulncheck. This skill automates that analysis to distinguish between actively exploitable vulnerable code paths and noise, mapping findings to specific remediation strategies.

What is the best way to triage Go dependency vulnerabilities in microservices?▼

The best way to triage Go dependency vulnerabilities in microservices is to use an automated workflow that analyzes reachability and enforces validation. This skill categorizes findings into actionable steps like immediate patching or scheduled upgrades while ensuring code stability.

How do I automate Go vulnerability remediation without breaking existing tests?▼

To automate Go vulnerability remediation without breaking tests, enforce strict validation guardrails after every patch attempt. This skill mandates running go mod tidy, linting, and testing before finalizing security patches to prevent breaking changes.

Can I use govulncheck to generate a security report table for my Go project?▼

Yes, you can use govulncheck to generate a security report table for your Go project. Running this skill scans the current project, analyzes vulnerable code paths, and outputs a structured report mapping findings to specific remediation strategies.

What steps should I take to patch a reachable vulnerability found in a Go CLI tool?▼

To patch a reachable vulnerability in a Go CLI tool, map the finding to a specific remediation strategy such as immediate patching or risk mitigation. After applying the fix, you must enforce validation by running linting and testing to ensure stability.

Does this vulnerability triage workflow support scheduled upgrades for Go dependencies?▼

Yes, this vulnerability triage workflow supports scheduled upgrades for Go dependencies. During the remediation mapping phase, it categorizes findings into actionable steps that include immediate patching, scheduled upgrades, and risk mitigation based on reachability.