PkgRadar

Go modules · proxy.golang.org

github.com/SonarSource/sonar-python

Credential file access: matched "aws_secret_access_key"

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260609095300-2136317d1b4aReview62026-06-10
v0.0.0-20260608140258-a58d3f87639bReview62026-06-09
v0.0.0-20260604113227-d62b8882bd83Review62026-06-05
v0.0.0-20260602134402-58948b9cd75bReview62026-06-03
v0.0.0-20260602095522-e37d897a453dReview62026-06-03
v0.0.0-20260528123420-89c4ee3c3762Review62026-05-29

Block this in CI

PkgRadar gates github.com/SonarSource/sonar-python (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/SonarSource/[email protected]