GoLeash: Mitigating Golang Software Supply Chain Attacks with Runtime Policy Enforcement
GoLeash is a novel system that enforces runtime security policies at the individual Go package level to stop software supply chain attacks. It works by tracing system calls back to specific packages, allowing for precise detection of malicious behavior even when code is obfuscated. This fine-grained approach outperforms coarse process-level sandboxing while maintaining acceptable performance.