PkgRadar

Go modules · proxy.golang.org

github.com/canonical/snapd

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260606162417-34baaae4213d

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/canonical/[email protected]/client/interfaces.go
mediumRemote Payloadmatched "cURL " · github.com/canonical/[email protected]/cmd/snap/cmd_interface.go
mediumRemote Payloadmatched "cURL " · github.com/canonical/[email protected]/daemon/api_json.go
mediumRemote Payloadmatched "cURL " · github.com/canonical/[email protected]/interfaces/builtin/common.go
mediumRemote Payloadmatched "cURL " · github.com/canonical/[email protected]/interfaces/core.go
mediumRemote Payloadmatched "cURL " · github.com/canonical/[email protected]/interfaces/repo.go
mediumRemote Payloadmatched "cURL " · github.com/canonical/[email protected]/overlord/devicestate/devicestatetest/gadget.go
mediumRemote Payloadmatched "cURL " · github.com/canonical/[email protected]/overlord/devicestate/handlers_serial.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260606162417-34baaae4213dHigh risk1062026-06-07
v0.0.0-20260605110015-190ec8d02e5cHigh risk1062026-06-07

Block this in CI

PkgRadar gates github.com/canonical/snapd (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/canonical/[email protected]