Skip to content

License Scanning support for Golang built-in libraries

Why are we doing this work

Golang's built-in libraries like stdlib aren't covered in License Scanning.

This causes the license for affected libraries to appear as Unknown in GitLab, even if the package is otherwise formatted correctly for ingestion by GitLab (e.g. "purl": "pkg:golang/stdlib@1.22.4").

Relevant links

Non-functional requirements

  • Documentation:
  • Feature flag:
  • Performance:
  • Testing:

Implementation plan

Verification steps