Go modules · proxy.golang.org

github.com/Renovatebot/renovate

Credential file access

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v11.35.5-0.20260827043109-fcec5428f09b+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20240730064220-daf48c7f06f8+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20250812043448-eadc1535dce9+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20260718142747-f532fdc8f62a+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20240729032232-e47e49f9cbfe+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20230107092927-803ea28427f4+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20250812084028-c635fd1594c9+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20260708122554-191cf7c1cfef+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20250407081505-727792a3cecd+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20260326233051-a083fa56b995+incompatible`	Low risk	0	2026-08-28
`v11.35.5-0.20191120080214-84d5632bfd8a+incompatible`

Block this in CI

PkgRadar gates github.com/Renovatebot/renovate (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Renovatebot/[email protected]+incompatible

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.