This is a bit off topic but since there might be some Go folks in here, does anyone know of a Go equivalent of WebGoat (an intentionally insecure code base for testing vulnerability scanners)? Doesn't need to be a WebGoat clone, just an insecure code base written in Go.