Description
Go has the module dependency data available right in the binary, via the Buildinfo data structure. In Go itself, the data is available through ReadBuildInfo function.
Why?
Go is widely used, and cve-bin-tool already supports extracting the dependency information from go.mod. Having an ability to extract the binary-bound data will significantly enrich the cve-bin-tool's results for cases when no source code is available.
Anything else?
Similar to #5232, I'm willing to implement this functionality if the idea is accepted.
Description
Go has the module dependency data available right in the binary, via the
Buildinfodata structure. In Go itself, the data is available through ReadBuildInfo function.Why?
Go is widely used, and cve-bin-tool already supports extracting the dependency information from
go.mod. Having an ability to extract the binary-bound data will significantly enrich the cve-bin-tool's results for cases when no source code is available.Anything else?
Similar to #5232, I'm willing to implement this functionality if the idea is accepted.