Prisma Cloud: How to Verify the dependencies of a go binary package?
623
Created On 05/03/24 09:31 AM - Last Modified 03/19/25 18:26 PM
Question
How to verify the dependencies of a go binary?
Environment
- Prisma Cloud Enterprise Edition
- Prisma Cloud Compute Edition
- Vulnerability Scanning
- Images, Hosts
- Go packages
Answer
Once you have the go binary change it to be an executable file
For example:
chmod 755 <binary-file>
Now run the go version command.
go version -m containerdÂ
This should list out the dependencies of the go binary.
For example:
go version -m containerd | grep runc, this will show the dependencies of containerd and filter runc,
user1@temp-instance:~$ go version -m containerd | grep runc dep github.com/containerd/go-runc v1.0.0 dep github.com/opencontainers/runc v1.1.5
Â
Additional Information
The Prisma Cloud defender inspects binaries to find packages and dependencies and report potential vulnerabilities.