Go modules · proxy.golang.org

github.com/GoogleCloudPlatform/workloadagent

Remote Payload, Go Mod Replace Local, Credential file access

Why PkgRadar flagged v0.0.0-20260716142535-7f66f8ee87f4

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260716142535-7f66f8ee87f4`	Review	27	2026-07-17
`v0.0.0-20260715084228-7415f9adc048`	Review	27	2026-07-16
`v0.0.0-20260714174922-d774950cefd6`	Review	27	2026-07-16
`v0.0.0-20260713164205-304b0727ad37`	Review	27	2026-07-14
`v0.0.0-20260709203944-c7d4cb9f818c`	Review	27	2026-07-11
`v0.0.0-20260707085310-e59823736923`	Review	27	2026-07-09
`v0.0.0-20260706234859-35e8d252901c`	Review	27	2026-07-07
`v0.0.0-20260701022952-17255a415bea`	Review	27	2026-07-02
`v0.0.0-20260626065959-e0750da5509b`	Review	27	2026-06-28
`v0.0.0-20260622183019-18756487b2b9`	Review	27	2026-06-24
`v0.0.0-20260619061758-eff9cfe86b9b`	Review	22	2026-06-20
`v0.0.0-20260617182545-38c770616178`	Review	15	2026-06-18

Block this in CI

PkgRadar gates github.com/GoogleCloudPlatform/workloadagent (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/GoogleCloudPlatform/[email protected]