Go modules · proxy.golang.org

github.com/aws/karpenter

Remote Payload, Credential file access

Why PkgRadar flagged v1.14.1-0.20260901201530-277a03d1dce0

Severity	Signal
medium	Remote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.14.1-0.20260901201530-277a03d1dce0`	Review	52	2026-09-02
`v1.14.1-0.20260901070033-85e8994b881c`	Review	52	2026-09-02
`v1.14.1-0.20260831162523-79386af9ff2b`	Review	52	2026-09-01
`v1.14.1-0.20260828185958-3fd3c81fde38`	Review	52	2026-08-30
`v0.0.0-20260828185958-3fd3c81fde38`	Review	52	2026-08-30
`v1.14.1-0.20260827212422-4c2ffe32ea22`	Review	52	2026-08-29
`v0.0.0-20260826213138-300cd16b2759`	Review	52	2026-08-28
`v1.14.1-0.20260825185707-670b0fd5d1fa`	Review	52	2026-08-27
`v0.27.2-0.20230407171648-dc49a34b7104`	Review	17	2026-08-25
`v0.30.1-0.20230901224804-369650921032`	Review	20	2026-08-24
`v0.30.1-0.20230920174823-4682e890ca48`	Review	20	2026-08-24
`v0.30.1-0.20230911163856-065eb27243b2`	Review

Block this in CI

PkgRadar gates github.com/aws/karpenter (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/aws/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.