PkgRadar

Go modules · proxy.golang.org

github.com/SigNoz/signoz

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.128.1-0.20260610093031-446dd4589fa6

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/signoz/[email protected]/pkg/querier/builder_query.go
mediumRemote Payloadmatched "cURL " · github.com/signoz/[email protected]/pkg/querier/querier.go
mediumRemote Payloadmatched "cURL " · github.com/signoz/[email protected]/pkg/querybuilder/where_clause_visitor.go
mediumRemote Payloadmatched "cUrl " · github.com/signoz/[email protected]/pkg/types/alertmanagertypes/maintenance.go
mediumRemote Payloadmatched "cURL " · github.com/signoz/[email protected]/pkg/types/querybuildertypes/querybuildertypesv5/qb.go
mediumRemote Payloadmatched "cURL " · github.com/signoz/[email protected]/pkg/types/querybuildertypes/querybuildertypesv5/query.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.128.1-0.20260610093031-446dd4589fa6High risk622026-06-11
v0.128.0High risk622026-06-11
v0.127.1High risk622026-06-08
v0.127.1-0.20260603075544-987844dbc805High risk622026-06-04
v0.127.0High risk622026-06-04
v0.126.3-rc.1.0.20260601140906-387ad06c2dedHigh risk622026-06-02
v0.126.3-rc.1High risk622026-06-02
v0.126.1High risk622026-05-30

Block this in CI

PkgRadar gates github.com/SigNoz/signoz (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/SigNoz/[email protected]