Go modules · proxy.golang.org
github.com/argoproj/argo-workflows/v4
Remote Payload: matched "curl "
Why PkgRadar flagged v4.0.0-rc4.0.20260610141412-cac474d8a5a7
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/argoproj/argo-workflows/[email protected]/cmd/argo/commands/auth/token.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/argoproj/argo-workflows/[email protected]/hack/api/jsonschema/main.go |
| medium | Remote Payload | matched "curl " · github.com/argoproj/argo-workflows/[email protected]/pkg/apiclient/http1/facade.go |
| medium | Credential file access | matched "id_rsa" · github.com/argoproj/argo-workflows/[email protected]/workflow/artifacts/git/git.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v4.0.0-rc4.0.20260610141412-cac474d8a5a7 | High risk | 46 | 2026-06-11 |
Block this in CI
pkgradar gate --ecosystem go github.com/argoproj/argo-workflows/[email protected]