---
title: "Cosmin Cojocar (@gosec) | Hashnode"
description: "Cosmin Cojocar (@gosec) writes on Hashnode. Read their latest articles and follow their work."
url: "https://hashnode.com/@gosec"
---

@gosec

# Cosmin Cojocar

@gosec · Joined March 2026

### [Taint Analysis in gosec: Tracking Data Flow from Source to Sink](https://oss-sec.hashnode.dev/taint-analysis-in-gosec-tracking-data-flow-from-source-to-sink?utm_source=hashnode&utm_medium=feed)

Taint Analysis in gosec: Tracking Data Flow from Source to Sink gosec is a static analysis tool that inspects Go source code for security vulnerabilities. It scans the Go AST and SSA form to find issu

10 min read · [oss-sec.hashnode.dev](https://oss-sec.hashnode.dev/taint-analysis-in-gosec-tracking-data-flow-from-source-to-sink?utm_source=hashnode&utm_medium=feed)

[Mar 28](https://hashnode.com/posts/taint-analysis-in-gosec-tracking-data-flow-from-source-to-sink/69c812957cf270651041d9f3)

### [AI-Powered Security Code Review with Autofix](https://oss-sec.hashnode.dev/ai-powered-security-code-review-with-autofix?utm_source=hashnode&utm_medium=feed)

Barry: AI-Powered Security Code Review for GitHub Pull Requests Classic static analysis tools are good at what they do — pattern matching, taint tracking, dataflow analysis. But they operate within ri

7 min read · [oss-sec.hashnode.dev](https://oss-sec.hashnode.dev/ai-powered-security-code-review-with-autofix?utm_source=hashnode&utm_medium=feed)

[Mar 25](https://hashnode.com/posts/ai-powered-security-code-review-with-autofix/69c43fd710e664c5dae53b27)