cleanstart/go repository overview

Verified GO Container Image

A hardened, minimal GO container image built from source with verifiable software provenance and an SBOM, designed for secure production deployments.

For additional versions including FIPS support, explore CleanStart Images — secure, hardened container images⁠

Pull Commands Download the runtime container images

docker pull cleanstart/go:latest
docker pull cleanstart/go:latest-dev

Interactive Development Start interactive session for development

  docker run -it --name go-dev -v $(pwd):/workspace -w /workspace --entrypoint /bin/sh cleanstart/go:latest-dev

Run Hello World Execute a simple Hello World program

 nano hello.go

package main
import "fmt"

func main() {
    fmt.Println("Hello, World!")
}

 docker run --rm -v "$(pwd)":/workspace -w /workspace cleanstart/go:latest-dev run hello.go

Mount Workspace Run container with local workspace mounted

docker run --rm -v $(pwd):/app -w /app cleanstart/go:latest-dev build

Application Server Run application with port forwarding

docker run -d --name go-app \
  -p 8080:8080 \
  -v $(pwd):/app \
  -w /app \
  cleanstart/go:latest

Why Use CleanStart Images⁠

• Verified — Built from source with verifiable software provenance
• Hardened — Minimal software footprint designed for secure deployment
• Transparent — SBOM available for visibility into image contents
• Production-ready — Built for modern container environments