An oversimplified benchmark between gosec and semgrep tested on go web-frameworks
Here a list of frameworks tools have been benchmarked on;
- beego
- buffalo
- echo
- fiber
- gin
- mango
- martin
- utron
Before you run the script, you have to clone the above mentioned libraries and put it on a single folder titled frameworks.
$ python benchmark_script.py
....
The benchmarking is very very basic so if you have gotta some magic lines to improve the evaluation, just fork it and I'm looking forward merging your contribution.
Any issue raise one !