EXTENSIONS

Go programs built into container images by ko, https://ko.build: no Dockerfile, no container daemon, one image per main package, pushed to a registry, loaded into the local daemon, or written to a tarball.

Upgrade Go projects: bump the Go toolchain version in go.mod and update all module dependencies

Run govulncheck against a Go module and record which known vulnerabilities affect the code

Scaffold a Go project — module, justfile, CI workflows, linters and release config in one workflow. Library and CLI variants.

Three adversarial Go code-review prompts ("lenses") for an independent