up

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Go/GoLanguageAnalyzer.cs

@@ -100,7 +100,7 @@ public sealed class GoLanguageAnalyzer : ILanguageAnalyzer
             cancellationToken.ThrowIfCancellationRequested();
 
             // Quick check for known binary formats
-            if (GoBinaryFormatDetector.IsPotentialBinary(path))
+            if (GoBinaryFormatDetector.IsPotentialBinary(path) || GoBinaryScanner.HasBuildInfoMagicPrefix(path))
             {
                 candidatePaths.Add(path);
             }

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Go/Internal/GoBinaryScanner.cs

@@ -33,6 +33,45 @@ internal static class GoBinaryScanner
         }
     }
 
+    public static bool HasBuildInfoMagicPrefix(string filePath)
+    {
+        if (string.IsNullOrWhiteSpace(filePath))
+        {
+            return false;
+        }
+
+        try
+        {
+            using var stream = new FileStream(filePath, FileMode.Open, FileAccess.Read, FileShare.Read);
+            if (stream.Length < BuildInfoMagic.Length)
+            {
+                return false;
+            }
+
+            var size = BuildInfoMagic.Length;
+            Span<byte> header = stackalloc byte[size];
+            var read = stream.Read(header);
+            if (read != header.Length)
+            {
+                return false;
+            }
+
+            return header.SequenceEqual(BuildInfoMagic.Span);
+        }
+        catch (IOException)
+        {
+            return false;
+        }
+        catch (UnauthorizedAccessException)
+        {
+            return false;
+        }
+        catch (System.Security.SecurityException)
+        {
+            return false;
+        }
+    }
+
     public static bool TryReadBuildInfo(string filePath, out string? goVersion, out string? moduleData)
     {
         goVersion = null;

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Go/Internal/GoCapabilityScanner.cs

@@ -36,8 +36,8 @@ internal static partial class GoCapabilityScanner
             var originalLine = lineIndex < lines.Length ? lines[lineIndex] : strippedLine;
             var lineNumber = lineIndex + 1;
 
-            // Skip empty lines
-            if (string.IsNullOrWhiteSpace(strippedLine))
+            // Skip whitespace-only lines while still scanning comment-only lines for directives.
+            if (string.IsNullOrWhiteSpace(strippedLine) && string.IsNullOrWhiteSpace(originalLine))
             {
                 continue;
             }

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Go/Internal/GoCgoDetector.cs

@@ -387,7 +387,7 @@ internal static partial class GoCgoDetector
     /// Matches #cgo directives with optional build constraints.
     /// Format: #cgo [GOOS GOARCH] DIRECTIVE: value
     /// </summary>
-    [GeneratedRegex(@"#cgo\s+(?:([a-z0-9_,!\s]+)\s+)?(\w+):\s*(.+?)(?=\n|$)", RegexOptions.Multiline | RegexOptions.IgnoreCase)]
+    [GeneratedRegex(@"#cgo\s+(?:([a-z0-9_,!\s]+)\s+)?([\w-]+):\s*(.+?)(?=\n|$)", RegexOptions.Multiline | RegexOptions.IgnoreCase)]
     private static partial Regex CgoDirectivePattern();
 
     /// <summary>

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Go/Internal/GoLicenseDetector.cs

@@ -44,6 +44,9 @@ internal static partial class GoLicenseDetector
         new("Apache-1.1", @"Apache License.*?(?:Version 1\.1|v1\.1)", "Apache License, Version 1.1"),
         new("Apache-1.0", @"Apache License.*?(?:Version 1\.0|v1\.0)", "Apache License, Version 1.0"),
 
+        // Boost (avoid mis-classifying as MIT)
+        new("BSL-1.0", @"Boost Software License", "Boost Software License 1.0"),
+
         // MIT variants
         new("MIT", @"(?:MIT License|Permission is hereby granted, free of charge)", "MIT License"),
         new("MIT-0", @"MIT No Attribution", "MIT No Attribution"),
@@ -82,7 +85,6 @@ internal static partial class GoLicenseDetector
         new("Unlicense", @"This is free and unencumbered software released into the public domain", "The Unlicense"),
         new("WTFPL", @"DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE", "Do What The F*ck You Want To Public License"),
         new("Zlib", @"zlib License|This software is provided 'as-is'", "zlib License"),
-        new("BSL-1.0", @"Boost Software License", "Boost Software License 1.0"),
         new("PostgreSQL", @"PostgreSQL License", "PostgreSQL License"),
         new("BlueOak-1.0.0", @"Blue Oak Model License", "Blue Oak Model License 1.0.0"),
 

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Go/Internal/GoVersionConflictDetector.cs

@@ -361,7 +361,7 @@ internal static partial class GoVersionConflictDetector
     /// <summary>
     /// Matches pseudo-versions: v0.0.0-timestamp-hash or vX.Y.Z-pre.0.timestamp-hash
     /// </summary>
-    [GeneratedRegex(@"^v\d+\.\d+\.\d+(-[a-z0-9]+)?\.?\d*\.?\d{14}-[a-f0-9]{12}$", RegexOptions.IgnoreCase)]
+    [GeneratedRegex(@"^v\d+\.\d+\.\d+-(?:\d{14}|(?:[0-9a-z-]+\.)*0\.\d{14})-[a-f0-9]{12}$", RegexOptions.IgnoreCase)]
     private static partial Regex PseudoVersionPattern();
 
     /// <summary>