Prisma Cloud: How to Verify the dependencies of a go binary package?

Prisma Cloud: How to Verify the dependencies of a go binary package?

437
Created On 05/03/24 09:31 AM - Last Modified 03/19/25 18:26 PM


Question


How to verify the dependencies of a go binary?

Environment


  • Prisma Cloud Enterprise Edition
  • Prisma Cloud Compute Edition
  • Vulnerability Scanning
  • Images, Hosts
  • Go packages


Answer


Once you have the go binary change it to be an executable file
For example:

chmod 755 <binary-file>

Now run the go version command.

go version -m containerd 

This should list out the dependencies of the go binary.

For example:
go version -m containerd | grep runc, this will show the dependencies of containerd and filter runc,

user1@temp-instance:~$ go version -m containerd  | grep runc
	dep	github.com/containerd/go-runc	v1.0.0	
	dep	github.com/opencontainers/runc	v1.1.5	



 



Additional Information


The Prisma Cloud defender inspects binaries to find packages and dependencies and report potential vulnerabilities.



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oPFkCAM&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail