PkgRadar

Go modules · proxy.golang.org

github.com/azure/azure-storage-azcopy/v10

Remote Payload: matched "curl "

Why PkgRadar flagged v10.30.1-0.20260526214923-7ddd1974cd46

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/azure/azure-storage-azcopy/[email protected]/e2etest/scenario_helpers.go
mediumRemote Payloadmatched "cURL " · github.com/azure/azure-storage-azcopy/[email protected]/ste/sender-appendBlobFromURL.go
mediumRemote Payloadmatched "cURL " · github.com/azure/azure-storage-azcopy/[email protected]/ste/sender-azureFileFromURL.go
mediumRemote Payloadmatched "cURL " · github.com/azure/azure-storage-azcopy/[email protected]/ste/sender-blockBlobFromURL.go
mediumRemote Payloadmatched "cURL " · github.com/azure/azure-storage-azcopy/[email protected]/ste/sender-pageBlobFromURL.go
mediumCredential file accessmatched "GOOGLE_APPLICATION_CREDENTIALS" · github.com/azure/azure-storage-azcopy/[email protected]/ste/sourceInfoProvider-GCP.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v10.30.1-0.20260526214923-7ddd1974cd46High risk1012026-06-04
v10.30.0-preview.1.0.20260601233728-5e44f9609cb1High risk1012026-06-02
v10.30.0-preview.1.0.20260224222025-2db54fd05393Review1012026-05-31

Block this in CI

PkgRadar gates github.com/azure/azure-storage-azcopy/v10 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/azure/azure-storage-azcopy/[email protected]