Go modules · proxy.golang.org

github.com/UpCloudLtd/upcloud-go-api/v9

Shipped Live Secret, Tls Verification Disabled

Why PkgRadar flagged v9.0.0-20260731104043-e8a78fa0b39f

Severity	Signal	Evidence
high	Shipped Live Secret	—
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v9.0.0-20260731104043-e8a78fa0b39f`	High risk	57	2026-08-01
`v9.0.0-20260625091310-c4bd0eb83f3c`	Low risk	0	2026-06-26
`v9.0.0-20260624214656-53327546393b`	Low risk	0	2026-06-25
`v9.0.0-20260623214721-9fe980ab17c0`	Low risk	0	2026-06-24
`v9.0.0-20260623194325-5d41671016d8`	Low risk	0	2026-06-24
`v9.0.0-20260623140626-f30ca4df6fd8`	Low risk	0	2026-06-24
`v9.0.0-20260617185413-91e273556c74`	Low risk	0	2026-06-18
`v9.0.0-20260616113917-d8288b106ee6`	Low risk	0	2026-06-17
`v9.0.0-20260610080907-e5712c05723b`	Low risk	0	2026-06-11

Block this in CI

PkgRadar gates github.com/UpCloudLtd/upcloud-go-api/v9 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/UpCloudLtd/upcloud-go-api/[email protected]