OWASP/Go-SCP

Golang Secure Coding Practices guide

Hosted by OWASP

View on GitHub ↗Jump to charts ↓

OWASP/Go-SCP has 5k+ stars and 400+ forks on GitHub, is written in Go, and was last pushed on May 31, 2024. Data as of . Signed-in members get hourly updates — create a free account.

Summary Information

Updated 22 minutes ago
Type:Curated List / Learning ResourceCategory(s):AppSec & Supply ChainEducation & Research ToolsSecurity & Privacy
Added to GitGenius on October 12th, 2026
Created on April 3rd, 2017
Open Issues & Pull Requests: 26 (+0)
GitHub issues: Enabled
Number of forks: 406
Total Stargazers: 5,295 (+0)
Total Subscribers: 123 (+0)

Repository Insights (GitGenius)

Median issue/PR response: 15.8 days
Mean response time: 186.4 days
90th percentile: 536.7 days
Tracked items: 7

Charts & Analytics

Fetching additional details & charts...

Issue Activity (beta)

Open issues: 7
New in 7 days: 0
Closed in 7 days: 0
Avg open age: 1,741 days
Stale 30+ days: 7
Stale 90+ days: 7

Recent activity

Opened in 7 days: 0
Closed in 7 days: 0
Comments in 7 days: 0
Events in 7 days: 0

Top labels

  • bug (3)
  • enhancement (2)

Most active issues this week

Sign in to see which issues are moving.
Sign in

Detailed Description

go-scp is a secure coding practices guide for Go web development.

The guide addresses the need for language-specific security guidance by adapting the OWASP Secure Coding Practices Quick Reference Guide to Go. It provides developers with concrete examples and recommendations showing how to implement secure coding patterns in Go, helping them understand both what security problems can arise during development and how to avoid them. The material covers OWASP's technology-agnostic security practices topic-by-topic, translated into Go-specific context.

Developers new to Go who have completed the Go tour will find this guide useful as a reference for secure development patterns. It is particularly suited for programmers with experience in other languages who are learning Go for web application development. The guide is available in multiple formats including PDF, Mobi, and ePub, making it accessible as both a learning resource and a reference document to consult during development.

The project maintains active engagement with contributions, as evidenced by the documented contribution process and the availability of build tooling information for those interested in participating. The guide continues to track alignment with the stable OWASP Secure Coding Practices Quick Reference Guide, ensuring recommendations remain current with established security standards.