Go modules · proxy.golang.org

github.com/aquasecurity/tracee/detectors

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260616114737-2daf7121153b

Severity	Signal	Evidence
medium	Go Mod Replace Local	go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/aquasecurity/tracee/[email protected]/go.mod

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260616114737-2daf7121153b`	Review	10	2026-06-17
`v0.0.0-20260616125938-59fcfa29499f`	Review	10	2026-06-17
`v0.0.0-20260615171859-9f9f894bec51`	Review	10	2026-06-17
`v0.0.0-20260615211536-bbe37d5731b0`	Review	10	2026-06-17
`v0.0.0-20260609022310-8df01e4a35bf`	Review	10	2026-06-10
`v0.0.0-20260608180503-2418057015dd`	Review	10	2026-06-09
`v0.0.0-20260608132508-4331c190cc6a`	Review	10	2026-06-09
`v0.0.0-20260608121430-9be1a48511d9`	Review	10	2026-06-09
`v0.0.0-20260602190355-d5aa4abe4628`	Review	10	2026-06-03
`v0.0.0-20260602143949-9e63fa749f21`	Review	10	2026-06-03
`v0.0.0-20260601201716-a80b8bf22183`	Review	10	2026-06-02

Block this in CI

PkgRadar gates github.com/aquasecurity/tracee/detectors (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/aquasecurity/tracee/[email protected]