PkgRadar

Go modules · proxy.golang.org

github.com/chainguard-dev/terraform-infra-common

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v1.0.14-0.20260610212837-b14eeca2fa1e

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/chainguard-dev/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615232817-2b108e561285Low risk02026-06-17
v1.1.1Low risk02026-06-17
v1.1.0Low risk02026-06-17
v0.0.0-20260615120512-38b3be8626ebLow risk02026-06-16
v1.0.14Low risk02026-06-16
v1.0.14-0.20260613175346-499d5db6ffd2Low risk02026-06-15
v0.0.0-20260613175346-499d5db6ffd2Low risk02026-06-15
v1.0.14-0.20260612175545-58c6406c7c7fLow risk02026-06-14
v0.0.0-20260612175545-58c6406c7c7fLow risk02026-06-14
v1.0.14-0.20260611215534-7319250f8f49Low risk02026-06-13
v0.0.0-20260611215534-7319250f8f49Low risk02026-06-13
v1.0.14-0.20260610212837-b14eeca2fa1eReview102026-06-12
v0.0.0-20260610212837-b14eeca2fa1eReview102026-06-12
v1.0.13-0.20260608161336-1da16c93e8faReview102026-06-09
v0.0.0-20260608161336-1da16c93e8faReview102026-06-09
v1.0.13-0.20260605183610-e908d4ec408eReview102026-06-07
v0.0.0-20260605183610-e908d4ec408eReview102026-06-07
v0.0.0-20260604181522-d5238fac10dfReview102026-06-05
v1.0.13-0.20260603070502-9baee710668cReview102026-06-05
v0.0.0-20260603070502-9baee710668cReview102026-06-05
v1.0.13-0.20260602170900-96655c0fc2aeReview102026-06-03
v0.0.0-20260602170900-96655c0fc2aeReview102026-06-03
v1.0.13-0.20260602082503-72a06b4dfd2fReview102026-06-03
v0.0.0-20260602082503-72a06b4dfd2fReview102026-06-03
v1.0.13-0.20260601174335-472711d3d531Review102026-06-02
v0.0.0-20260601174335-472711d3d531Review102026-06-02
v1.0.13-0.20260528150005-fc77fad38eaeLow risk02026-05-30
v0.0.0-20260528150005-fc77fad38eaeLow risk02026-05-30
v1.0.12Low risk02026-05-29

Block this in CI

PkgRadar gates github.com/chainguard-dev/terraform-infra-common (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/chainguard-dev/[email protected]
Start free — 25 scans / moView full evidence