--- title: "#156: Go-SCP, A Secure Coding Practices Guide for Go" publication: "Go Weekly" issue: 156 published_at: "2017-04-20" canonical_url: "https://golangweekly.com/issues/156" --- Go Newsletter 156 . [Read this on the Web](http://golangweekly.com/issues/156) [Go Newsletter](http://golangweekly.com) Issue 156 — April 20, 2017 Featured [Periph: A Library for I/O with Peripherals and Boards](https://periph.io/?utm_source=golangweekly&utm_medium=email) A standalone library with no external dependencies for interfacing using GPIO, I2C, SPI, or 1-Wire. Think of it as a ‘lower level layer than Gobot’. Marc-Antonie Ruel [The Go-SCP Book: A Secure Coding Practices Guide for Go](https://github.com/Checkmarx/Go-SCP?utm_source=golangweekly&utm_medium=email) A Go-focused secure code practices guide inspired by the work of OWASP (Open Web Application Security Project). It’s available in [PDF, Mobi or ePub formats](https://www.gitbook.com/book/checkmarx/go-scp/details)too. Checkmarx [Kallax: A New Typesafe Postgres ORM](https://blog.sourced.tech/post/kallax/?utm_source=golangweekly&utm_medium=email) Kallax uses code generation for both type safety and performance. This post also digs into why they felt a new ORM was needed. Miguel Molina [Try Codeship Basic: simple hosted CI that works out of the box](https://codeship.com/features/basic?utm_source=email-sponsorship&utm_medium=cpc-go-weekly-primary&utm_campaign=cooper-basic-features-signup-campaign) Get set up with our hosted Continuous Integration service in under 3 minutes with Codeship Basic. Join thousands of happy customers like InvisionApp & Whole Foods. [Try it for free now](https://codeship.com/features/basic?utm_source=email-sponsorship&utm_medium=cpc-go-weekly-primary&utm_campaign=cooper-basic-features-signup-campaign). Codeshipsponsored[![\](https://copm.s3.amazonaws.com/0723d859.png)](https://codeship.com/features/basic?utm_source=email-sponsorship&utm_medium=cpc-go-weekly-primary&utm_campaign=cooper-basic-features-signup-campaign) [Getting Plugged In with Go Plugins](https://www.youtube.com/watch?v=LmfC8-lN_AA&utm_source=golangweekly&utm_medium=email) video Google’s Ian Lewis on Go 1.8’s [plugin support](https://beta.golang.org/pkg/plugin/) with use cases and some Q&A. _(30 minutes)_ YouTube [Kasper: A Kafka Stream Processing Library](https://movio.co/blog/Kasper-process-library/?utm_source=golangweekly&utm_medium=email) Kasper offers similar functionality to, and is inspired by, [Apache Samza.](http://samza.apache.org/) [GitHub repo here.](https://github.com/movio/kasper) Movio [Is Go 2 Actually Happening? If So, When Will Development Start?](https://www.reddit.com/r/golang/comments/65rqi6/is_go_2_actually_happening_if_so_when_will/?utm_source=golangweekly&utm_medium=email) news In short, not exactly, and not any time soon. Reddit [c2go: A Tool for Converting C to Go](https://github.com/elliotchance/c2go?utm_source=golangweekly&utm_medium=email) tools It’s young, but the goal is to go 1.0 once it can compile SQLite3 successfully. Elliot Chance Jobs [Backend Go Engineers (San Francisco and Remote)](http://grnh.se/1ned2x1?utm_source=golangweekly&utm_medium=email) Looking for talented, hard-working, and creative builders with backend dev experience. Open to freelancers with the possibility to transition to a full-time role. Axiom Zen USA [Go Software Engineer (Rotterdam, Netherlands)](https://housinganywhere.workable.com/jobs/55249) Housing Anywhere [Life's Short. Build Cool Stuff!](https://hired.com/join/?utm_source=petercooperpress&utm_medium=sponsor&utm_campaign=%28b2c%29%28l-all%29%28r-swe%29%28q2-17-go-weekly%29&utm_content=newsletter) Get your new job in 2 weeks, not 2 months. Get Hired. Hired In Brief [One Dev's Workflow for Writing CLI Applications with Go](https://carlosbecker.com/posts/golang-cli-apps/?utm_source=golangweekly&utm_medium=email) tutorial Carlos Alexandro Becker [Webhooks Made Easy](https://medium.com/statuscode/webhooks-made-easy-3dbcb7a585e7?utm_source=golangweekly&utm_medium=email) tutorial A small app that accepts a release webhook from GitHub and tweets about it. Dean Karn [Multi-Valued Expressions in Go](https://medium.com/golangspec/multi-valued-expressions-in-go-bd28ddfe1b39?utm_source=golangweekly&utm_medium=email) tutorial Examples of returning multiple values, passing multi-value functions around, and single- vs multi-value versions of the same function. Michał Łowicki [Writing Postgres Triggers in Go](https://www.opsdash.com/blog/postgresql-triggers-golang.html?utm_source=golangweekly&utm_medium=email) tutorial Uses a Go shared library with C bindings to create an insert/update trigger. RapidLoop [Memory and Address Alignment in Go](http://www.tapirgames.com/blog/golang-memory-alignment?utm_source=golangweekly&utm_medium=email) tutorial Tapir Games [Have you tried MongoDB Atlas yet?](https://www.mongodb.com/cloud/atlas/lp/try-2?jmp=cpress&utm_campaign=WW_CP_newsletter_sponsorship_FY17Q2&utm_content=sponsored&utm_medium=&utm_source=gonewsletter) tools Get started with a free, hosted replica set. No credit card needed. MONGODBsponsored [Jaeger: Microservice Tracing, Profiling and Instrumentation from Uber](http://jaeger.readthedocs.io/en/latest/news/?utm_source=golangweekly&utm_medium=email) tools Offers client libraries in Go, Python, Java, and Node. Uber [plgo: Tooling to Easily Create Postgres Extensions in Go](https://github.com/microo8/plgo?utm_source=golangweekly&utm_medium=email) tools Vlado Magyar [update-golang: A Script to Fetch and Install New Go Releases](https://github.com/udhos/update-golang?utm_source=golangweekly&utm_medium=email) tools udhos [Code with a Pre-bundled, Hassle-Free Go Distribution](https://www.activestate.com/activego/downloads?utm_source=golangweekly&utm_medium=email&utm_term=&utm_content=17-04-20-sponsored-link&utm_campaign=activego-beta) tools ActiveGo Beta offers a ready-to-use, supported Go distribution with packages for big data, API connectivity, testing, debugging and more. activestatesponsored [Rooby: A Ruby-like Object Oriented Language Written in Go](https://github.com/st0012/Rooby?utm_source=golangweekly&utm_medium=email) code Stan Lo [flux: A Simple CQRS Framework for Go](https://github.com/yehohanan7/flux?utm_source=golangweekly&utm_medium=email) code John Pradeep [secureoperator: A DNS Protocol Proxy for Google's DNS-over-HTTPS](https://github.com/fardog/secureoperator?utm_source=golangweekly&utm_medium=email) code So you can respond to DNS requests locally but request records over HTTPS. Nathan Wittstock [DungeonFS: A FUSE Filesystem and Dungeon Crawling Adventure Game Engine](https://github.com/ChrisRx/dungeonfs?utm_source=golangweekly&utm_medium=email) code A bit of fun. Lets you play a text adventure via the filesystem. Chris Marshall [Jennifer: A Code Generator for Go](https://github.com/dave/jennifer?utm_source=golangweekly&utm_medium=email) code Ideal for programmatic Go code generation from Go itself. Dave Brophy [go-linq: .NET LINQ-Like Query Methods for Go](https://github.com/ahmetb/go-linq?utm_source=golangweekly&utm_medium=email) code Ahmet Alp Balkan Go Newsletter is curated by [Peter Cooper](https://twitter.com/peterc) and [Glenn Goodrich](https://twitter.com/ruprict) [Read this issue on the Web](http://golangweekly.com/issues/156) [See our archives](http://golangweekly.com/issues) [Change your email address](*|UPDATE_PROFILE|*) [Stop getting this newsletter](*|UNSUB|*) Published by [Cooperpress](https://cooperpress.com/) Fairfield Enterprise Centre, Lincoln Way, Louth, LN11 0LS, UK