Go modules · proxy.golang.org

github.com/SECUREGO/gosec/v2

Shipped Live Secret, Tls Verification Disabled, Remote Payload +2 more

Why PkgRadar flagged v2.28.1-0.20260720074807-45b083a0cb42

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.28.1-0.20260720074807-45b083a0cb42`	High risk	98	2026-07-27
`v2.28.0`	High risk	98	2026-07-27
`v2.27.2-0.20260706123117-849570622f56`	High risk	11	2026-07-07
`v2.26.1`	High risk	11	2026-07-07
`v2.27.0`	High risk	11	2026-07-07
`v2.24.7`	High risk	11	2026-07-07
`v2.26.0`	High risk	11	2026-07-07
`v2.25.0`	High risk	11	2026-07-07
`v2.24.2`	High risk	11	2026-07-07
`v2.24.5`	High risk	11	2026-07-07
`v2.24.4`	High risk	11	2026-07-07
`v2.24.3`	High risk	11	2026-07-07
`v2.24.6`	High risk	11	2026-07-07
`v2.24.1`	High risk	11	2026-07-07
`v2.22.10`

Block this in CI

PkgRadar gates github.com/SECUREGO/gosec/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/SECUREGO/gosec/[email protected]