Understanding Supply Chain Threats with Static Analysis - GopherCon 2023

Explore a powerful CLI tool for Go that enhances security by identifying privileged permissions in package dependencies. Dive into the world of supply chain threats and learn how static analysis can prevent attacks and promote secure coding practices within the Go ecosystem. Discover how this tool provides crucial visibility into package behaviors, helping developers detect unexpected capabilities and potential vulnerabilities. Gain insights into the importance of understanding implicit package capabilities and how this knowledge can be leveraged to strengthen your Go projects against supply chain attacks.