PkgRadar

Go modules · proxy.golang.org

github.com/calyptia/core-images-index/go-index

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260611155928-993371614ce3

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/calyptia/core-images-index/[email protected]/container.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/calyptia/core-images-index/[email protected]/operator.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260611155928-993371614ce3Review242026-06-13
v0.0.0-20260608195225-92fe5b7e641aReview242026-06-10
v0.0.0-20260605130442-36e9330b7f33Review242026-06-08
v0.0.0-20260527222142-b299cdff6622Review242026-05-31

Block this in CI

PkgRadar gates github.com/calyptia/core-images-index/go-index (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/calyptia/core-images-index/[email protected]