Go modules · proxy.golang.org

github.com/GoogleContainerTools/Skaffold

Remote Payload, Tls Verification Disabled, Credential file access

Why PkgRadar flagged v1.38.1-0.20220802202405-be0b90058bde

Severity	Signal
medium	Remote Payload ×2
medium	Tls Verification Disabled

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.38.1-0.20220802202405-be0b90058bde`	Review	47	2026-08-29
`v0.21.1`	Review	8	2026-08-13
`v0.36.0`	Review	13	2026-08-13
`v0.17.0`	Review	5	2026-08-13
`v0.21.0`	Review	8	2026-08-13
`v0.37.0`	Review	13	2026-08-13
`v0.18.0`	Review	5	2026-08-13
`v0.29.0`	Review	8	2026-08-13
`v0.14.0`	Review	5	2026-08-13
`v0.16.0`	Review	5	2026-08-13
`v0.7.0`	Review	5	2026-08-13
`v1.13.1`	Review	37	2026-08-13
`v0.28.0`	Review	8	2026-08-13
`v0.15.1`	Review	5	2026-08-13
`v1.11.4`	Review	37	2026-08-13

Block this in CI

PkgRadar gates github.com/GoogleContainerTools/Skaffold (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/GoogleContainerTools/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.