Go modules · proxy.golang.org

github.com/circleci-public/chunk-cli

Remote Payload, Tls Verification Disabled, Credential file access

Why PkgRadar flagged v0.7.135

Severity	Signal
medium	Remote Payload ×2
medium	Tls Verification Disabled ×3

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.7.166`	Review	70	2026-09-03
`v0.7.165`	Review	70	2026-09-02
`v0.7.164`	Review	58	2026-09-02
`v0.7.163`	Review	58	2026-09-01
`v0.7.162`	Review	58	2026-08-31
`v0.7.161`	Review	58	2026-08-30
`v0.7.160`	Review	58	2026-08-29
`v0.7.157`	Review	70	2026-08-26
`v0.7.156`	Review	70	2026-08-25
`v0.7.155`	Review	70	2026-08-24
`v0.7.154`	Review	70	2026-08-23
`v0.7.153`	Review	70	2026-08-22
`v0.7.152`	Review	70	2026-08-21
`v0.7.151`	Review	70	2026-08-20
`v0.7.150`	Review	70	2026-08-19

Block this in CI

PkgRadar gates github.com/circleci-public/chunk-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/circleci-public/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.