Go modules · proxy.golang.org

github.com/ansible-semaphore/semaphore

Go Mod Replace Local, Credential file access, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260730111806-013abf82e804

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260730111806-013abf82e804`	Review	13	2026-07-31
`v0.0.0-20260729100201-0bd3589a6160`	Review	13	2026-07-30
`v0.0.0-20260728141806-57e1d6380c11`	Review	13	2026-07-29
`v0.0.0-20260728095623-68c5869b6fcf`	Review	13	2026-07-29
`v0.0.0-20260728050753-36b270668cf0`	Review	13	2026-07-29
`v0.0.0-20260726113507-2582d705f548`	Review	13	2026-07-27
`v0.0.0-20260725064558-081425d2bc20`	Review	13	2026-07-26
`v0.0.0-20260721143423-e06fe8c11622`	Review	13	2026-07-22
`v0.0.0-20260721140914-fa9dabfd8ed8`	Review	13	2026-07-22
`v0.0.0-20260720084116-0fa1aa9832cc`	Review	13	2026-07-21
`v0.0.0-20260719193940-7f9f66157ed7`	Review	13	2026-07-20
`v0.0.0-20260719102416-98b4d89a2976`	Review	25	2026-07-20

Block this in CI

PkgRadar gates github.com/ansible-semaphore/semaphore (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ansible-semaphore/[email protected]