PkgRadar

Go modules · proxy.golang.org

github.com/cloudfoundry/csb-brokerpak-azure

Remote Payload: matched "github.com/%s/releases/download"

Why PkgRadar flagged v0.0.0-20260613131749-7b17bbd0e386

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/%s/releases/download" · github.com/cloudfoundry/[email protected]/acceptance-tests/helpers/brokerpaks/brokerpaks.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260613131749-7b17bbd0e386Review122026-06-15
v0.0.0-20260606131633-080ae92902f0Review122026-06-08
v0.0.0-20260604210401-9d94d19edc04Review122026-06-06
v0.0.0-20260603180543-3635a900020fReview122026-06-05
v0.0.0-20260601210537-ad6cb903b545Review122026-06-03
v0.0.0-20260530131742-1d89c2c17bb3Review122026-06-01
v0.0.0-20260527213033-f3c4b153470bReview122026-05-30

Block this in CI

PkgRadar gates github.com/cloudfoundry/csb-brokerpak-azure (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/cloudfoundry/[email protected]