PkgRadar

Go modules · proxy.golang.org

code.forgejo.org/mfenniak/forgejo-runner/v12

Remote Payload: matched "curl "

Why PkgRadar flagged v12.0.0-20260610012941-9d163baad02a

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · code.forgejo.org/mfenniak/forgejo-runner/[email protected]/act/runner/run_context.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v12.0.0-20260610012941-9d163baad02aReview122026-06-12

Block this in CI

PkgRadar gates code.forgejo.org/mfenniak/forgejo-runner/v12 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go code.forgejo.org/mfenniak/forgejo-runner/[email protected]