Go modules · proxy.golang.org

github.com/OpenNebula/one

Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20200820100726-e5933780c0f2

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Scanned (UTC)
`v0.0.0-20260806094655-090bafc6acbc`	Low risk	2026-08-07
`v0.0.0-20260804145922-0b73bdfa89de`	Low risk	2026-08-05
`v0.0.0-20260804094620-4fe17b8ee9df`	Low risk	2026-08-05
`v0.0.0-20260804091126-d795b213e4a4`	Low risk	2026-08-05
`v0.0.0-20260804081659-18e1da3277f2`	Low risk	2026-08-05
`v0.0.0-20260726181657-8f6d42c664bf`	Low risk	2026-07-27
`v0.0.0-20260722073329-923bc890874e`	Low risk	2026-07-23
`v0.0.0-20260721130016-89a99ddc0ac1`	Low risk	2026-07-22
`v0.0.0-20260721113156-d0c52be45203`	Low risk	2026-07-22
`v0.0.0-20260720144240-c859cfbb80f1`	Low risk	2026-07-21
`v0.0.0-20260717142256-e5b5abbc2b87`	Low risk	2026-07-18
`v0.0.0-20260717094738-e13f03e91c16`	Low risk	2026-07-18

Block this in CI

PkgRadar gates github.com/OpenNebula/one (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/OpenNebula/[email protected]