Go modules · proxy.golang.org

github.com/alexakulov/clickhouse-backup/v2

Tls Verification Disabled, Credential file access

Why PkgRadar flagged v2.8.1-0.20260725042951-fce7950f909d

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.8.1-0.20260725042951-fce7950f909d`	Review	17	2026-07-27
`v2.8.0`	Review	17	2026-07-17
`v2.7.4-0.20260704175750-f4bb6f41d3db`	Review	17	2026-07-06
`v2.7.4`	Review	17	2026-07-06
`v2.7.3`	Review	17	2026-07-04
`v2.7.3-0.20260614132318-06de4005421f`	Low risk	0	2026-06-19
`v2.7.2-0.20260610024951-27828c5f2c64`	Low risk	0	2026-06-12
`v2.7.1-0.20260605111141-817d63bf9569`	Low risk	0	2026-06-06
`v2.7.1-0.20260604035942-e16c50c10a06`	Low risk	0	2026-06-05
`v2.6.44`	Low risk	0	2026-06-05
`v2.7.1-0.20260528025548-f8128052063d`	Low risk	0	2026-05-30

Block this in CI

PkgRadar gates github.com/alexakulov/clickhouse-backup/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/alexakulov/clickhouse-backup/[email protected]