Go modules · proxy.golang.org

github.com/actionscore/actions

Remote Payload, Tls Verification Disabled

Why PkgRadar flagged v1.18.0-rc.1.0.20260723134122-4f2baeb64fe3

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.18.0-rc.1.0.20260723134122-4f2baeb64fe3`	Review	60	2026-07-25
`v1.16.17`	Review	60	2026-07-25
`v1.16.17-rc.1`	Review	60	2026-07-25
`v1.17.11`	Review	60	2026-07-25
`v1.17.11-rc.1`	Review	60	2026-07-25
`v1.18.2-rc.2`	Review	60	2026-07-25
`v1.18.0-rc.1.0.20260721202839-a934df1dd333`	Review	60	2026-07-23
`v1.18.2`	Review	60	2026-07-23
`v1.18.0-rc.1.0.20260623182747-4f7f7f88e156`	Review	14	2026-06-25
`v1.18.2-rc.1`	Review	14	2026-06-25
`v1.16.16`	Review	7	2026-06-20
`v1.16.16-rc.1`	Review	7	2026-06-20
`v1.18.0-rc.1.0.20260615170159-ca329632ad72`	Low risk	0	2026-06-17
`v1.18.0-rc.1.0.20260610144029-1f6500856439`

Block this in CI

PkgRadar gates github.com/actionscore/actions (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/actionscore/[email protected]