Go modules · proxy.golang.org

github.com/Tencent/bk-bcs/bcs-services/bcs-webconsole

Shell Credential File Read, Tls Verification Disabled, Remote Payload

Why PkgRadar flagged v0.0.0-20260715014859-a4f1a5a72eab

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260715014859-a4f1a5a72eab`	Review	51	2026-07-17
`v0.0.0-20260714115806-149680cd142e`	Review	51	2026-07-16
`v0.0.0-20260713120932-9b16a74b3931`	Review	51	2026-07-14
`v0.0.0-20260703064100-d0c36bc9a493`	Review	51	2026-07-04
`v0.0.0-20260625070520-a4e778368ddb`	Review	51	2026-07-03
`v0.0.0-20260623082913-b19985c1e8a3`	Review	51	2026-07-03
`v0.0.0-20260701012700-06be2eb3b8c0`	Review	51	2026-07-03
`v0.0.0-20260615093940-7f93a1fe1372`	Review	9	2026-06-16
`v0.0.0-20260615070245-13f91c1a7f04`	Review	9	2026-06-16
`v0.0.0-20260612113504-be390549bb5b`	Review	4	2026-06-13
`v0.0.0-20260605033750-cbf2a6d1dee3`	Low risk	0	2026-06-06

Block this in CI

PkgRadar gates github.com/Tencent/bk-bcs/bcs-services/bcs-webconsole (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Tencent/bk-bcs/bcs-services/[email protected]