Compare software

govulncheck vs Dependency-Check: catalog facts
govulncheckDependency-Check
Free

Free and open source under the BSD-3-Clause license.

Free

The software is free under its open-source licence. Hosting, hardware and external…

Windows, macOS, Linux, Command line Windows, macOS, Linux, Command line
  • Reachability analysis cuts down on irrelevant vulnerability reports
  • Scans either source code or compiled binaries
  • It matches dependencies to CPE identifiers and reports the linked CVEs, and it plugs into Maven, Gradle, Jenkins…
  • Only covers Go code
  • Queries the online Go vulnerability database by default
  • CPE matching produces false positives and misses, and it needs an NVD API key and a long initial…
Downloadable app Downloadable app
Open source Open source
License: BSD-3-Clause License: Apache-2.0
No account needed Not stated if an account is needed
Not stated if it works offline Not stated if it works offline

Checked October 2, 2026

Checked September 22, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.