Go modules · proxy.golang.org

github.com/cloudposse/atmos

Remote Payload, Credential file access, Obfuscation Density

Why PkgRadar flagged v1.222.0-rc.3

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.223.1-rc.0.0.20260717160350-e6ad3a303077`	Review	104	2026-07-18
`v0.0.0-20260717160350-e6ad3a303077`	Review	104	2026-07-18
`v1.223.1-rc.0.0.20260717010454-580f5c0202d1`	Review	104	2026-07-18
`v0.0.0-20260717010454-580f5c0202d1`	Review	104	2026-07-18
`v1.223.1-rc.0.0.20260716201416-c04641e964f7`	Review	104	2026-07-17
`v0.0.0-20260716201416-c04641e964f7`	Review	104	2026-07-17
`v1.223.1-rc.0.0.20260716141912-b59e1a3f5e18`	Review	104	2026-07-17
`v1.223.1-rc.0`	Review	104	2026-07-17
`v1.223.1-rc.0.0.20260716014751-0485a62a5c75`	Review	104	2026-07-17
`v0.0.0-20260716014751-0485a62a5c75`	Review	104	2026-07-17
`v1.223.1-0.20260715182457-6b3b0ef2374d`	Review	104	2026-07-17
`v0.0.0-20260715182457-6b3b0ef2374d`	Review

Block this in CI

PkgRadar gates github.com/cloudposse/atmos (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/cloudposse/[email protected]