Go - 1

2025 (5)

December (2)

github: CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust

GitHub

2025-12-18

GitHub released CodeQL versions 2.23.7 and 2.23.8, adding new security queries for Go and Rust. CodeQL is the static analysis engine used by GitHub Code Scanning and Code Quality to detect and help remediate code-quality and security issues.

github: Dependabot-based dependency graphs for Go

GitHub

2025-12-09

GitHub announced Dependabot-based dependency graphs for Go projects to provide more complete and accurate transitive dependency trees, as part of continued supply chain security improvements for package ecosystem support.

September (3)

github: Incremental security analysis with CodeQL is now available for all languages

GitHub

2025-09-23

GitHub announced that CodeQL analysis on pull requests is now incremental for Go, C#, C/C++ and Swift, meaning all CodeQL-supported languages now use the new incremental analysis to provide faster security scans and feedback.

github: Go private registry support for Dependabot now generally available

GitHub

2025-09-09

Dependabot is now generally available for Go private registries: it can update private Go modules hosted on enterprise registries and behind GOPROXY-compatible private proxies, alongside public modules in the same workflow, enabling automated version and dependency updates for private Go code.

github: CodeQL 2.22.4 adds support for Go 1.25 and accuracy improvements

GitHub

2025-09-03

GitHub released CodeQL 2.22.4 (2025-09-02), adding support for Go 1.25 and delivering accuracy improvements to its static analysis engine used by GitHub Code Scanning to find and remediate security issues.