Go modules · proxy.golang.org

github.com/Smallstep/Cli

Credential file access

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.30.4`	Low risk	0	2026-06-12
`v0.14.0`	Low risk	0	2026-06-09
`v0.15.14-rc1`	Low risk	0	2026-06-09
`v0.15.7-rc.4`	Low risk	0	2026-06-09
`v0.15.17-rc1.test-arm6`	Low risk	0	2026-06-09
`v0.15.17-rc2.crt-mgr`	Low risk	0	2026-06-09
`v0.15.5`	Low risk	0	2026-06-09
`v0.0.2-rc.1`	Low risk	0	2026-06-09
`v0.0.2-rc.15`	Low risk	0	2026-06-09
`v0.16.0-rc.6`	Low risk	0	2026-06-09
`v0.14.4-rc.1`	Low risk	0	2026-06-09
`v0.14.0-rc.1`	Low risk	0	2026-06-09
`v0.16.0-rc.3`	Low risk	0	2026-06-09
`v0.15.8-rc7`	Low risk	0	2026-06-09
`v0.0.2-rc.10`	Low risk

Block this in CI

PkgRadar gates github.com/Smallstep/Cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Smallstep/[email protected]