Go

Go at a glance

Go (Golang) is a widely used programming language, behind much cloud-native and infrastructure software. The Go team ships a new major version about twice a year and maintains the current and previous release with fixes, including coordinated security releases for the toolchain and standard library.

For admins Go is usually a build-time toolchain rather than a runtime — applications compile to static binaries. That means a Go security fix (for example in the standard library's crypto or net/http) requires rebuilding and redeploying the affected applications, not just updating a shared runtime. Keep your build pipelines on a supported Go version and rebuild promptly for security releases. The module dependencies of each app carry their own supply-chain risk — audit them (govulncheck helps). Track Go's release cadence and the support window of the version you build with.