ctguard-action

Version updated for https://github.com/oasilturk/ctguard to version v0.10.0.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

CTGuard is a GitHub Action and Go tool designed to detect timing side-channel vulnerabilities in Go code, such as non-constant-time operations or secret-dependent branches. It automates the identification of potential leaks of sensitive data through execution timing, providing confidence levels for each finding to prioritize risk assessment. Key capabilities include scanning for specific patterns like secret leaks to logs, insecure comparisons, and variable-time arithmetic, with support for customizable rules and CI integration.

What’s Changed

Full Changelog: https://github.com/oasilturk/ctguard/compare/v0.9.0...v0.10.0