PkgRadar

Go modules · proxy.golang.org

github.com/argoproj-labs/argocd-operator

Remote Payload: matched "github.com/argoproj-labs/rollout-extension/releases/download"

Why PkgRadar flagged v0.19.0-rc1.0.20260610150105-2e1cf4daa673

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/argoproj-labs/rollout-extension/releases/download" · github.com/argoproj-labs/[email protected]/common/defaults.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.19.0-rc1.0.20260610150105-2e1cf4daa673Review322026-06-11
v0.19.0-rc2.0.20260610150847-f8859aba066fReview322026-06-11
v0.19.0-rc1Review322026-06-05
v0.19.0-rc2Review322026-06-05
v0.19.0-rc1.0.20260603181030-3beeabb300f9Review322026-06-05
v0.17.0-rc1.0.20260604032803-75657a0db8bfReview322026-06-05
v0.17.0-rc1.0.20260603181030-3beeabb300f9Review322026-06-04
v0.17.0-rc1.0.20260502030934-3a9dc793f0c8Review322026-06-04
v0.17.0-rc1.0.20260601113236-3dfd5805a81cReview322026-06-03
v0.17.0-rc1.0.20260527153302-d129af8a772cReview322026-05-30
v0.18.0Review322026-05-30

Block this in CI

PkgRadar gates github.com/argoproj-labs/argocd-operator (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/argoproj-labs/[email protected]
github.com/argoproj-labs/argocd-operator — Go modules security scan | PkgRadar