Go

Applicability

Snyk for Go is supported for Snyk Open Source and Snyk Code.

Check the language availability to be imported as an application, tested, or monitored using the Snyk products.

Available functions:

• SCM import, available for Snyk Open Source and Snyk Code.

• Test or monitor your app through CLI and IDE, available for Snyk Open Source and Snyk Code.

• Test your app's SBOM using pkg:golang

• Test your app's packages using pkg:golang

Package managers and supported file extensions

Snyk for Go supports Go Modules and dep as package managers, and the package registry uses multiple sources.

Snyk for Go supports the following file formats:

• Snyk Open:

  • For Go Modules: go.mod

  • For dep: gopkg.lock

• Snyk Code: .go

Frameworks and libraries

The following frameworks and libraries are supported in Snyk for Go:

• Azure/azure-sdk-for-go/sdk/ai/azopenai - Comprehensive

• gage-technologies/mistral-go - Comprehensive

• Gin - Partial

• Go Standard Library - Comprehensive

• google/generative-ai-go/genai - Comprehensive

• GORM library - Partial

• grpc-go - Comprehensive

• labstack/echo - Partial

• sashabaranov/go-openai - Comprehensive

• spf13/pflag - Comprehensive

Features

The following features are supported in Snyk for Go:

Snyk Open Source	Snyk Code
License scanning Reports	Reports Custom rules Interfile analysis

The Snyk FixPR feature is not available for Go. This means that you will not be notified if the PR checks fail when the following conditions are met:

• The PR checks feature is enabled and configured to Only fail when the issues found have a fix available.

• "Fixed in" available is set to Yes.