Go modules · proxy.golang.org

github.com/FairwindsOps/polaris

Tls Verification Disabled, Credential file access

Why PkgRadar flagged v0.0.0-20260817114848-9fe4a72c779e

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260817114848-9fe4a72c779e`	Review	18	2026-08-18
`v0.0.0-20260806161001-dafa0b74fc09`	Review	18	2026-08-08
`v0.0.0-20260803140311-292a1c257cc7`	Review	18	2026-08-04
`v0.0.0-20260721161925-4bdf5315b6a8`	Review	18	2026-07-23
`v0.0.0-20201204154027-86b856a88cfd`	Low risk	0	2026-07-18
`v0.0.0-20191106185718-3d07ce80049f`	Low risk	0	2026-07-18
`v0.0.0-20260706210958-278cb9008ca8`	Low risk	0	2026-07-07
`v0.0.0-20260706203637-d6858e0fe430`	Low risk	0	2026-07-07
`v0.0.0-20260701114646-387e787a40c9`	Low risk	0	2026-07-06

Block this in CI

PkgRadar gates github.com/FairwindsOps/polaris (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/FairwindsOps/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.