Go modules · proxy.golang.org

github.com/NVIDIA/infra-controller/rest-api

Tls Verification Disabled, Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260902220558-1a803859fbc5

Severity	Signal
medium	Tls Verification Disabled ×7

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260902220558-1a803859fbc5`	Review	50	2026-09-03
`v0.0.0-20260902215331-40b52e4907a8`	Review	50	2026-09-03
`v0.0.0-20260902214334-ff2513be13a4`	Review	50	2026-09-03
`v0.0.0-20260902203421-2d2d6493398b`	Review	50	2026-09-03
`v0.0.0-20260902192449-8dd05ebce494`	Review	50	2026-09-03
`v0.0.0-20260902190713-ad8f320b7880`	Review	50	2026-09-03
`v0.0.0-20260902180208-6258c49bcff3`	Review	50	2026-09-03
`v0.0.0-20260902151505-5dcd69f72283`	Review	50	2026-09-03
`v0.0.0-20260902075809-156dc11a09c1`	Review	50	2026-09-03
`v0.0.0-20260902032348-4db5cc5ee222`	Review	50	2026-09-03
`v0.0.0-20260902030922-48a8e0ce287a`	Review	50	2026-09-03
`v0.0.0-20260902024216-b7266118d85d`	Review	50	2026-09-03

Block this in CI

PkgRadar gates github.com/NVIDIA/infra-controller/rest-api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/NVIDIA/infra-controller/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.