← Back to scan
File as GitHub Issue repo: avelino/awesome-go

Push this scan report to avelino/awesome-go

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

Action `actions/cache` pinned to mutable ref `@v4`

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
HIGH MINED126 Workflow container/services image `golang:latest` unpinned .github/workflows/run-check.yaml:14
HIGH MINED115 Action `actions/checkout` pinned to mutable ref `@v6` .github/workflows/run-check.yaml:16
HIGH MINED126 Workflow container/services image `golang:latest` unpinned .github/workflows/site-deploy.yaml:16
HIGH MINED115 Action `actions/setup-node` pinned to mutable ref `@v6` .github/workflows/site-deploy.yaml:32
HIGH MINED115 Action `actions/cache` pinned to mutable ref `@v4` .github/workflows/site-deploy.yaml:22
HIGH MINED115 Action `actions/checkout` pinned to mutable ref `@v6` .github/workflows/site-deploy.yaml:18
HIGH MINED126 Workflow container/services image `golang:latest` unpinned .github/workflows/tests.yaml:16
HIGH MINED115 Action `actions/checkout` pinned to mutable ref `@v6` .github/workflows/tests.yaml:18
HIGH MINED126 Workflow container/services image `golang:latest` unpinned .github/workflows/pr-quality-check.yaml:38
HIGH MINED115 Action `actions/checkout` pinned to mutable ref `@v6` .github/workflows/pr-quality-check.yaml:49
HIGH GO-2026-5039 stdlib: GO-2026-5039 go.mod
HIGH GO-2026-5038 stdlib: GO-2026-5038 go.mod
HIGH GO-2026-5037 stdlib: GO-2026-5037 go.mod
HIGH GO-2026-4986 stdlib: GO-2026-4986 go.mod
HIGH GO-2026-4982 stdlib: GO-2026-4982 go.mod
HIGH GO-2026-4981 stdlib: GO-2026-4981 go.mod
HIGH GO-2026-4980 stdlib: GO-2026-4980 go.mod
HIGH GO-2026-4977 stdlib: GO-2026-4977 go.mod
HIGH GO-2026-4976 stdlib: GO-2026-4976 go.mod
HIGH GO-2026-4971 stdlib: GO-2026-4971 go.mod
HIGH GO-2026-4947 stdlib: GO-2026-4947 go.mod
HIGH GO-2026-4946 stdlib: GO-2026-4946 go.mod
HIGH GO-2026-4918 stdlib: GO-2026-4918 go.mod
HIGH GO-2026-4870 stdlib: GO-2026-4870 go.mod
HIGH GO-2026-4869 stdlib: GO-2026-4869 go.mod
HIGH GO-2026-4865 stdlib: GO-2026-4865 go.mod
HIGH GO-2026-4864 stdlib: GO-2026-4864 go.mod
HIGH GO-2026-4603 stdlib: GO-2026-4603 go.mod
HIGH GO-2026-4602 stdlib: GO-2026-4602 go.mod
HIGH GO-2026-4601 stdlib: GO-2026-4601 go.mod
HIGH GO-2026-4403 stdlib: GO-2026-4403 go.mod
HIGH GO-2026-4342 stdlib: GO-2026-4342 go.mod
HIGH GO-2026-4341 stdlib: GO-2026-4341 go.mod
HIGH GO-2026-4340 stdlib: GO-2026-4340 go.mod
HIGH GO-2026-4337 stdlib: GO-2026-4337 go.mod
HIGH GO-2025-4175 stdlib: GO-2025-4175 go.mod
HIGH GO-2025-4155 stdlib: GO-2025-4155 go.mod
HIGH GO-2025-4015 stdlib: GO-2025-4015 go.mod
HIGH GO-2025-4014 stdlib: GO-2025-4014 go.mod
HIGH GO-2025-4013 stdlib: GO-2025-4013 go.mod
HIGH GO-2025-4012 stdlib: GO-2025-4012 go.mod
HIGH GO-2025-4011 stdlib: GO-2025-4011 go.mod
HIGH GO-2025-4010 stdlib: GO-2025-4010 go.mod
HIGH GO-2025-4009 stdlib: GO-2025-4009 go.mod
HIGH GO-2025-4008 stdlib: GO-2025-4008 go.mod
HIGH GO-2025-4007 stdlib: GO-2025-4007 go.mod
HIGH GO-2025-4006 stdlib: GO-2025-4006 go.mod
HIGH GO-2025-3956 stdlib: GO-2025-3956 go.mod
HIGH GO-2025-3849 stdlib: GO-2025-3849 go.mod
HIGH GO-2025-3751 stdlib: GO-2025-3751 go.mod
HIGH GO-2025-3750 stdlib: GO-2025-3750 go.mod
HIGH GO-2025-3749 stdlib: GO-2025-3749 go.mod
HIGH GO-2025-3563 stdlib: GO-2025-3563 go.mod
HIGH GO-2026-5024 golang.org/x/sys: GO-2026-5024 go.mod
HIGH GO-2026-5030 golang.org/x/net: GO-2026-5030 go.mod
HIGH GO-2026-5029 golang.org/x/net: GO-2026-5029 go.mod
HIGH GO-2026-5028 golang.org/x/net: GO-2026-5028 go.mod
HIGH GO-2026-5027 golang.org/x/net: GO-2026-5027 go.mod
HIGH GO-2026-5026 golang.org/x/net: GO-2026-5026 go.mod
HIGH GO-2026-5025 golang.org/x/net: GO-2026-5025 go.mod
HIGH GO-2026-4918 golang.org/x/net: GO-2026-4918 go.mod
HIGH GO-2026-4441 golang.org/x/net: GO-2026-4441 go.mod
HIGH GO-2026-4440 golang.org/x/net: GO-2026-4440 go.mod
LOW AIC003 Duplicated implementation block across source files .github/scripts/check-quality/main.go:188
Reset to top 5 64 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `avelino/awesome-go`

**Score: 86/100 (B)**  ·  64 findings  ·  scanned 2026-06-05 04:37 UTC  ·  2,373 LOC

| Severity | Count |
|---|---|
| CRITICAL | 0 |
| HIGH | 63 |
| MEDIUM | 0 |
| LOW | 1 |

📊 [Full filterable report](https://repobility.com/scan/8a9786a9-f820-4353-a30d-bf4f5c088a14/)  ·  ![scorecard](https://repobility.com/scan/8a9786a9-f820-4353-a30d-bf4f5c088a14/report.png?v=1780634254-s2)

### Top findings

1. **HIGH** `MINED126` — Workflow container/services image `golang:latest` unpinned
   `.github/workflows/run-check.yaml:14` · ✓ Repobility
2. **HIGH** `MINED115` — Action `actions/checkout` pinned to mutable ref `@v6`
   `.github/workflows/run-check.yaml:16` · ✓ Repobility
3. **HIGH** `MINED126` — Workflow container/services image `golang:latest` unpinned
   `.github/workflows/site-deploy.yaml:16` · ✓ Repobility
4. **HIGH** `MINED115` — Action `actions/setup-node` pinned to mutable ref `@v6`
   `.github/workflows/site-deploy.yaml:32` · ✓ Repobility
5. **HIGH** `MINED115` — Action `actions/cache` pinned to mutable ref `@v4`
   `.github/workflows/site-deploy.yaml:22` · ✓ Repobility

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/8a9786a9-f820-4353-a30d-bf4f5c088a14/_
Megaproject â high spam risk
Could not determine 'avelino/awesome-go' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.
Open in GitHub to file this issue Cancel

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.