PkgRadar

Go modules · proxy.golang.org

github.com/SigStore/fulcio

Credential file access: matched ".config/gcloud"

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.8.8-0.20260529205617-362e11d2196fReview32026-06-02
v1.8.7Review32026-06-02
v1.8.7-0.20260528134716-d614dd4d761bReview32026-05-30
v1.8.6Review32026-05-30

Block this in CI

PkgRadar gates github.com/SigStore/fulcio (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/SigStore/[email protected]
Start free — 25 scans / moView full evidence