We support tracking Golang dependencies using the Go Modules dependency management system and its associated file
By keeping this file committed to your repository, we will automatically scan it for dependencies when you have done any of our integrations to your CI/CD pipeline.
Gopkg.lock is considered deprecated (opens new window) and will not get any improvements present in other format, such as
go mod tidy before pushing the go.mod files, which cleans up unused modules. This makes the results from our service even better.
We also support Golang projects using Bazel, see here for more information.