Go modules · proxy.golang.org

github.com/VMware-Tanzu/tanzu-framework

Tls Verification Disabled, Remote Payload, Credential file access +1 more

Why PkgRadar flagged v1.4.0-pre-alpha-2.0.20220727085232-8ac67dd958ee

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.4.0-pre-alpha-2.0.20220727085232-8ac67dd958ee`	Review	80	2026-07-29
`v1.4.0-pre-alpha-2.0.20220316070307-0a318348f7fa`	Review	65	2026-07-29
`v1.4.0-pre-alpha-2.0.20220615111157-dc4d3718f04a`	Review	68	2026-07-29
`v1.4.0-pre-alpha-2.0.20230502112918-8070299d2252`	Review	18	2026-07-29
`v1.4.0-pre-alpha-2.0.20220707033927-37f1c2d1fce2`	Review	80	2026-07-29
`v0.0.0-20220317012932-decb612d736b`	Review	65	2026-07-29
`v0.0.0-20211214190759-4466ba3f0c50`	Review	53	2026-07-29
`v1.4.0-pre-alpha-2.0.20211003002159-c04475d0033f`	Review	53	2026-07-29
`v1.4.0-pre-alpha-2.0.20220502160020-f252ba305dd6`	Review	53	2026-07-29
`v1.4.0-pre-alpha-2.0.20220601110128-f8a6facca89a`	Review	68	2026-07-29
`v1.4.0-pre-alpha-2.0.20221006104339-59f44fd1cc95`	Review	6

Block this in CI

PkgRadar gates github.com/VMware-Tanzu/tanzu-framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/VMware-Tanzu/[email protected]