Securing Go modules made easy (and accurately!)

Verifying Go's Reproducible Builds and Introducing Source Spotter for Checksum Database Auditing

The article discusses Go's reproducible builds feature introduced in Go 1.21, which automatically downloads newer toolchain versions when ne

Google's Assured OSS Program a Safe Haven For Developers

Repurposing Go's Module System as a Universal Package Manager for Ruby Gems

A thought experiment exploring how Go's module system (go get) can be repurposed as a universal package manager for other languages like Rub

Understanding a Subtle Bug in Go's errgroup and the Importance of Testing

The article discusses a subtle bug encountered while working with Go's errgroup in a project called Kratos. The author shares their experien

Building a Go-based utility for managing Claude Code profiles across platforms

The author is creating a simple developer utility in Go to help manage Claude Code profiles, allowing users to run it with different models

Golang Code Review Notes: Security Auditing and Bug Classes - Part II

This is a follow-up blog post about Golang code auditing and security. The authors previously published a resource for code auditors and sec