PkgRadar

Go modules · proxy.golang.org

gitea.com/Gitea/act

Remote Payload

Why PkgRadar flagged v0.259.0

SeveritySignalEvidence
mediumRemote Payloadgitea.com/gitea/[email protected]/pkg/runner/run_context.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.259.0Review122026-06-21
v0.261.10Review122026-06-21
v0.2.51Review122026-06-21
v0.2.59Review122026-06-21
v0.233.4Review122026-06-21
v0.234.2Review122026-06-21
v0.245.2Review122026-06-21
v0.243.4Review122026-06-21
v0.249.0Review122026-06-21
v0.246.2Review122026-06-21
v0.251.1Review122026-06-21
v0.260.2Review122026-06-21
v0.261.0Review122026-06-21
v0.259.2Review122026-06-21
v0.262.0Review122026-06-21

Block this in CI

PkgRadar gates gitea.com/Gitea/act (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gitea.com/Gitea/[email protected]
Start free — 25 scans / moView full evidence