Go modules · proxy.golang.org

github.com/IBM/ibmcloud-volume-file-vpc

Remote Payload

Why PkgRadar flagged v1.2.22-0.20260902155044-71e30fcc4f04

Severity	Signal
medium	Remote Payload ×20

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.2.22-0.20260902155044-71e30fcc4f04`	Review	24	2026-09-03
`v1.2.22-0.20260902080038-bdd2d47a5188`	Review	24	2026-09-03
`v1.2.22-0.20260902072323-04474efb1668`	Review	24	2026-09-03
`v1.2.22-0.20260901194924-f5b89bfee7f2`	Review	24	2026-09-03
`v1.2.22-0.20260831092218-00f3dc52db95`	Review	24	2026-09-01
`v1.2.21-0.20260831052443-458ebf175c70`	Review	24	2026-09-01
`v1.2.21-0.20260830183716-b1447ca7729d`	Review	24	2026-09-01
`v1.2.21-0.20260830171600-f6c809c26df4`	Review	24	2026-08-31
`v1.2.21`	Review	24	2026-08-25
`v1.2.21-0.20260822104939-d22bebb02dd3`	Review	24	2026-08-23
`v1.2.21-0.20260822101710-1b30b52d1871`	Review	24	2026-08-23
`v1.2.18-0.20260821101404-2a34f21077ed`	Review	24

Block this in CI

PkgRadar gates github.com/IBM/ibmcloud-volume-file-vpc (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/IBM/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.