Go modules · proxy.golang.org

github.com/canonical/oci-factory/tools/cli-client

Credential file access: matched "GITHUB_TOKEN"

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260612093326-afc58dffc0c9`	Low risk	0	2026-06-13
`v0.0.0-20260609150617-aa31b8b8e421`	Low risk	0	2026-06-10
`v0.0.0-20260609124438-481298ae3a37`	Low risk	0	2026-06-10
`v0.0.0-20260609115312-26e88af94658`	Low risk	0	2026-06-10
`v0.0.0-20260608132809-9365ed6986c9`	Low risk	0	2026-06-09
`v0.0.0-20260605100636-d05ccad515c0`	Low risk	0	2026-06-06
`v0.0.0-20260605100548-350374ee061e`	Low risk	0	2026-06-06
`v0.0.0-20260605092910-00b886319da3`	Low risk	0	2026-06-06
`v0.0.0-20260604102841-b942120da63f`	Low risk	0	2026-06-06
`v0.0.0-20260601140150-f2130965845b`	Low risk	0	2026-06-02
`v0.0.0-20260601095612-75162da33614`	Low risk	0	2026-06-02
`v0.0.0-20260529172318-50a5ca319aff`	Low risk	0	2026-06-01
`v0.0.0-20260528104517-b6157b047795`	Review	5	2026-05-29

Block this in CI

PkgRadar gates github.com/canonical/oci-factory/tools/cli-client (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/canonical/oci-factory/tools/[email protected]