Go modules · proxy.golang.org

github.com/databricks/databricks-sql-go

Tls Verification Disabled, Go Cgo Preamble

Why PkgRadar flagged v1.14.1-0.20260818014958-c12a9a30fec4

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.1.5-0.20221112013000-657b83025daa`	Low risk	0	2026-08-20
`v0.1.5-0.20221111013735-4f1c0b6dd0d9`	Low risk	0	2026-08-20
`v0.1.5-0.20221111015658-7055002439ae`	Low risk	0	2026-08-20
`v0.1.5-0.20221111021327-de28b1d30aad`	Low risk	0	2026-08-20
`v0.1.5-0.20221111022008-3739f2c2dfad`	Low risk	0	2026-08-20
`v0.1.5-0.20221111201732-ce32b295f390`	Low risk	0	2026-08-20
`v1.14.1-0.20260818014958-c12a9a30fec4`	Review	12	2026-08-19
`v1.14.1-0.20260813054730-da3befac86e2`	Review	12	2026-08-14
`v1.14.1-0.20260730141108-94da4710e0eb`	Review	12	2026-08-01
`v1.14.1-0.20260729045207-f88a5766180f`	Review	12	2026-07-31
`v1.14.1-0.20260727185653-ca8d30d6c670`	Review	12	2026-07-29
`v1.14.1-0.20260724210529-bfeaca5bc9aa`	Review

Block this in CI

PkgRadar gates github.com/databricks/databricks-sql-go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/databricks/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.