Go modules · proxy.golang.org

github.com/buildkite/buildkite-gha

Remote Payload

Why PkgRadar flagged v0.6.2-0.20260808130025-7e9205ab9484

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.6.2-0.20260808130025-7e9205ab9484`	Review	12	2026-08-09
`v0.6.2-0.20260808123947-14c9e63df919`	Review	12	2026-08-09
`v0.6.2-0.20260808123223-8a7fbac847fa`	Review	12	2026-08-09
`v0.6.2-0.20260808112250-7166a24ef69a`	Review	12	2026-08-09
`v0.6.1`	Review	12	2026-08-09
`v0.6.1-0.20260808095926-229bfeb267f2`	Review	12	2026-08-09
`v0.6.1-0.20260808095551-ca96abc24a4f`	Review	12	2026-08-09
`v0.6.1-0.20260808095039-54151f9c94be`	Review	12	2026-08-09
`v0.6.1-0.20260808092301-faa963f085a6`	Review	12	2026-08-09
`v0.6.0`	Review	12	2026-08-09
`v0.5.1-0.20260808090215-1333a7906f14`	Review	12	2026-08-09
`v0.5.1-0.20260808085825-c4bdf932ffc6`	Review	12	2026-08-09

Block this in CI

PkgRadar gates github.com/buildkite/buildkite-gha (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/buildkite/[email protected]