burrowers-garble @ v0.10.0

integrity

size: 151.1 KiB
downloaded: 2026-07-04 06:49 UTC
last checked: 2026-07-19 09:02 UTC
overlays: go
detected: go module mvdan.cc/garble

source https://github.com/burrowers/garble · available · github

release notes

This release drops support for Go 1.19, continues support for Go 1.20, and adds initial support for the upcoming Go 1.21.

@lu4p rewrote the code to detect whether reflect is used on each Go type, which is used to decide which Go types should not be obfuscated to prevent breakage. The old code analyzed syntax trees with type information, which is cheap but clumsy. The new code uses SSA, which adds a bit of CPU cost to builds, but allows for a more powerful analysis that is less likely to break on edge cases. While this change does slow down builds slightly, we will start using SSA for more features in the near term, such as control flow obfuscation. See #732.

@pagran improved the patching of Go's linker to also obfuscate funcInfo.entryoff, making it harder to relate a function's metadata with its body in the binary. See #641.

@mvdan rewrote garble's caching to be more robust, avoiding errors such as "cannot load garble export file". The new caching system is entirely separate from Go's GOCACHE, being placed in GARBLE_CACHE, which defaults to a directory such as ~/.cache/garble. See #708.

@DominicBreuker taught -literals to support obfuscating large string literals by using the "simple" obfuscator on them, as it runs in linear time. See #720.

@mvdan added support for garble run, the obfuscated version of go run, to quickly test that a main program still works when obfuscated. See #661.

A number of bugfixes are also included:

Ensure that sync/atomic types are still aligned by the compiler - #686
Print the chosen random seed when using -seed=random - #696
Avoid errors in git apply if the system language isn't English - #698
Avoid a panic when importing a missing package - #694
Suggest a command when asking the user to rebuild garble - #739

download

unix · zip

curl -fL -o v0.10.0.zip https://ratatoskr.space/pkg/burrowers-garble/v0.10.0.zip
                    printf '%s  %s\n' '7ed3b5f1f8dfec20136a4717a1912bb427e08c9590edd80e0d35189df983266a' 'v0.10.0.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/burrowers-garble/v0.10.0.zip"
$out = "v0.10.0.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "7ed3b5f1f8dfec20136a4717a1912bb427e08c9590edd80e0d35189df983266a") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v0.10.0.tar.gz https://ratatoskr.space/pkg/burrowers-garble/v0.10.0.tar.gz
                    printf '%s  %s\n' 'cc1bee2d4d97e6b62f3d7f411782c9706e62014a5cc8315e3044df306680bd15' 'v0.10.0.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/burrowers-garble/v0.10.0.tar.gz"
$out = "v0.10.0.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "cc1bee2d4d97e6b62f3d7f411782c9706e62014a5cc8315e3044df306680bd15") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v0.10.0.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/burrowers-garble/v0.10.0.zip
                    printf '%s  %s\n' '7ed3b5f1f8dfec20136a4717a1912bb427e08c9590edd80e0d35189df983266a' 'v0.10.0.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/burrowers-garble/v0.10.0.zip"
$out = "v0.10.0.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "7ed3b5f1f8dfec20136a4717a1912bb427e08c9590edd80e0d35189df983266a") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v0.10.0.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/burrowers-garble/v0.10.0.tar.gz
                    printf '%s  %s\n' 'cc1bee2d4d97e6b62f3d7f411782c9706e62014a5cc8315e3044df306680bd15' 'v0.10.0.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/burrowers-garble/v0.10.0.tar.gz"
$out = "v0.10.0.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "cc1bee2d4d97e6b62f3d7f411782c9706e62014a5cc8315e3044df306680bd15") { throw "sha256 mismatch" }

artifact	format	size	hashes
v0.10.0.zip	zip	152.9 KiB	blake3-24 577779a019bed5e569841fe9b695faa91521cc5019b08c56 sha256 7ed3b5f1f8dfec20136a4717a1912bb427e08c9590edd80e0d35189df983266a sha1 31a583699491005c822e231940c335b493ed8a4f
v0.10.0.tar.gz	tar.gz	110.9 KiB	blake3-24 a16dd567b0d5449412544ca1fcec0bf979ecc860ed68759f sha256 cc1bee2d4d97e6b62f3d7f411782c9706e62014a5cc8315e3044df306680bd15 sha1 bacfd47ef87185501abdc03997a02677f326de88

go module archive

module zip with the module path rewritten to this mirror; fetched by go get through the GOPROXY route

artifact	format	size	hashes
v0.10.0.zip	zip	155.1 KiB	blake3-24 4ca6dfa419da0aaf2b39bd3a813f8411eebb4c722117cebc sha256 df8f55c4bbc510c9db21683b1b4417db1bb97e68821fb1fa9481c4693873ad7b sha1 da8761f444ad70064ad869f06f6d102728335a2f

install

bazel

http_archive(
    name = "burrowers-garble",
    urls = ["https://ratatoskr.space/pkg/burrowers-garble/v0.10.0.tar.gz"],
    integrity = "sha256-zBvuLU2X5rYvPX9BF4LJcG5iAUpcyDFeMETfMGaAvRU=",
    strip_prefix = "burrowers-garble-v0.10.0",
)

zig

.url = "https://ratatoskr.space/pkg/burrowers-garble/v0.10.0.tar.gz",

GOPROXY=https://ratatoskr.space GOSUMDB=off go get ratatoskr.space/pkg/burrowers-garble@v0.10.0

install via yggdrasil mesh

bazel

http_archive(
    name = "burrowers-garble",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/burrowers-garble/v0.10.0.tar.gz"],
    integrity = "sha256-zBvuLU2X5rYvPX9BF4LJcG5iAUpcyDFeMETfMGaAvRU=",
    strip_prefix = "burrowers-garble-v0.10.0",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/burrowers-garble/v0.10.0.tar.gz",

GOPROXY=http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg GOSUMDB=off GOINSECURE=14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/* go get 14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/burrowers-garble@v0.10.0

← v0.10.1 v0.9.3 →