Gosec checks Go source code for common security problems, including
unsafe cryptography, injection risks, and insecure file permissions.
It supports configurable rules and reports in JSON, SARIF, and other
formats.

The SlackBuild compiles offline using the supplied vendor archive.
Analyzed projects must have their own dependencies available separately.

Run "gosec ./..." inside a Go module. Use "gosec -help" for rules and
options, or "gosec -fmt=json -out=results.json ./..." for a JSON report.
Findings normally produce a nonzero exit status. The -no-fail option
allows a successful exit even when findings are reported.

Normal security scanning does not require an AI service. Optional fix
suggestions contact an external provider when configured and can send
source code or findings to that service. Do not configure these options
for confidential code without reviewing the provider and data policy.