Go modules · proxy.golang.org

github.com/GoogleCloudPlatform/guest-agent

Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260718213605-a1ffdafd6424

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260718213605-a1ffdafd6424`	Review	10	2026-07-20
`v0.0.0-20260715222319-3852c03a09c6`	Review	10	2026-07-17
`v0.0.0-20260423190930-f7ec086e813c`	Review	10	2026-07-16
`v0.0.0-20260707204317-cf7bee6862f9`	Review	10	2026-07-09
`v0.0.0-20260630194128-0d188293c210`	Review	8	2026-07-02
`v0.0.0-20250507171459-4a6c37024999`	Low risk	0	2026-06-20
`v0.0.0-20250204070636-b1d81597ad6d`	Low risk	0	2026-06-20
`v0.0.0-20241209232304-2ef2fb65159a`	Low risk	0	2026-06-20
`v0.0.0-20240805175039-f6d5c1e5cc07`	Low risk	0	2026-06-20
`v0.0.0-20240525072133-5723ac468ba4`	Low risk	0	2026-06-20
`v0.0.0-20231103170353-9034ba6f7635`	Low risk	0	2026-06-20
`v0.0.0-20220104180853-575e34a798ed`	Low risk	0	2026-06-20

Block this in CI

PkgRadar gates github.com/GoogleCloudPlatform/guest-agent (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/GoogleCloudPlatform/[email protected]