Csec Go Agent

#New Relic Security Agent for Go under the New Relic Software License v1.0 Software Notice.

Repo : [newrelic/csec-go-agent ](https://github.com/newrelic/csec-go-agent)

Package Name: newrelic_security_agent

The New Relic Security Agent for Go under the New Relic Software License v1.0 Software Notice.This module enables instrumentation of golang application for interactive application security analysis (IAST) and exposes exploitable vulnerabilities. The IAST capability should only be used in pre-production environments as the application is tested for real exploitable vulnerabilities.

Installation

Compatibility and Requirements

For the latest version of the agent, Go 1.18+ is required. Linux, MacOS, and Windows are supported.

Installing and using the Go agent

To install the agent, follow the instructions in our [GETTING_STARTED](https://github.com/newrelic/csec-go-agent/blob/main/GETTING_STARTED.md) document.

Getting Started

examples/sample-vulnerable-application/main.go is an example that will appear as "Example App" in your New Relic applications list. To run it:

env NEW_RELIC_LICENSE_KEY=__YOUR_NEW_RELIC_LICENSE_KEY__LICENSE__ \
    go run examples/sample-vulnerable-application/main.go

Support Matrix

Go Versions

For the latest version of the agent, Go 1.17+ is required.

Service Frameworks

• net/http
• gin-gonic/gin
• gorilla/mux
• google.golang.org/grpc
• labstack/echo
• julienschmidt/httprouter
• micro/go-micro
• valyala/fasthttp
• graphql-go/graphql

Databases

• database/sql
• mattn/go-sqlite3
• jmoiron/sqlx
• go-mssqldb
• mongodb/mongo-go-driver
• go-sql-driver/mysql
• lib/pq
• jackc/pgx
• jackc/pgx/v5

###Supported Vulnerabilities

• Remote Code Execution
• SQL Injection
• NoSQL Injection
• Stored XSS
• Reflected XSS
• File Access
• SSRF
• Application Integrity Violation
• LDAP Injection
• XPath Injection
• XQuery Injection
• JavaScript Code Injection

Instrumentation Packages

The following [