GoSurf: Identifying Software Supply Chain Attack Vectors in Go

Carmine Cesarano, Vivi Andersson, Roberto Natella +1

In Go, the widespread adoption of open-source software has led to a flourishing ecosystem of third-party dependencies, which are often integrated into critical systems. However, th…