PkgRadar

Go modules · proxy.golang.org

github.com/containers/buildah

Tls Verification Disabled: matched "--insecure"

Why PkgRadar flagged v1.44.1-0.20260619153031-8acdea7544cb

SeveritySignalEvidence
mediumTls Verification Disabledmatched "--insecure" · github.com/containers/[email protected]/pkg/parse/parse.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.44.1-0.20260619153031-8acdea7544cbReview122026-06-20
v0.0.0-20260619153031-8acdea7544cbReview122026-06-20
v1.44.1-0.20260618175742-81fa123e73a6Low risk02026-06-19
v0.0.0-20260618175742-81fa123e73a6Low risk02026-06-19
v1.44.1-0.20260618171350-c2daf6d69e96Low risk02026-06-19
v0.0.0-20260618164818-c1eb6c8dd334Low risk02026-06-19
v0.0.0-20260618162341-928083dc9803Low risk02026-06-19
v1.44.1-0.20260618162341-928083dc9803Low risk02026-06-19
v0.0.0-20260618161703-b1177adb4dc6Low risk02026-06-19
v1.44.1-0.20260616172753-ea3d17294b5cLow risk02026-06-18
v0.0.0-20260616172753-ea3d17294b5cLow risk02026-06-18
v1.44.1-0.20260615175003-358cdf26aad3Low risk02026-06-17
v0.0.0-20260615175003-358cdf26aad3Low risk02026-06-17
v1.44.1-0.20260611070006-03d961990f6bLow risk02026-06-12
v1.44.1-0.20260609173924-23cf340ca61fLow risk02026-06-10
v0.0.0-20260609173924-23cf340ca61fLow risk02026-06-10
v1.43.2Low risk02026-06-09
v1.44.1-0.20260608174828-0320f1629aa6Low risk02026-06-09
v0.0.0-20260608174828-0320f1629aa6Low risk02026-06-09
v0.0.0-20260605155707-769d311d739dLow risk02026-06-06
v1.44.1-0.20260602233307-fc53f958681cLow risk02026-06-04
v0.0.0-20260602233307-fc53f958681cLow risk02026-06-04
v1.44.1-0.20260601204905-5b1b18eebdc2Low risk02026-06-03
v0.0.0-20260601204905-5b1b18eebdc2Low risk02026-06-03
v1.44.1-0.20260529110645-57133832ed74Low risk02026-05-30
v1.44.1-0.20260528060219-64db27aaef5aLow risk02026-05-29
v0.0.0-20260528060219-64db27aaef5aLow risk02026-05-29

Block this in CI

PkgRadar gates github.com/containers/buildah (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/containers/[email protected]