PkgRadar

Go modules · proxy.golang.org

github.com/dregor/lego/v4

Tls Verification Disabled: matched "InsecureSkipVerify: true"

Why PkgRadar flagged v4.0.0-20260617152008-dc5086ed13b4

SeveritySignalEvidence
mediumTls Verification Disabledmatched "InsecureSkipVerify: true" · github.com/dregor/lego/[email protected]/providers/dns/dnsmadeeasy/dnsmadeeasy.go
mediumTls Verification Disabledmatched "InsecureSkipVerify: true" · github.com/dregor/lego/[email protected]/providers/dns/efficientip/efficientip.go
mediumTls Verification Disabledmatched "InsecureSkipVerify: true" · github.com/dregor/lego/[email protected]/providers/dns/ispconfig/ispconfig.go
mediumTls Verification Disabledmatched "InsecureSkipVerify: true" · github.com/dregor/lego/[email protected]/providers/dns/namesurfer/namesurfer.go
mediumRemote Payloadmatched "cURL " · github.com/dregor/lego/[email protected]/providers/dns/rackspace/internal/types.go
mediumRemote Payloadmatched "cURL\n\t\t\t" · github.com/dregor/lego/[email protected]/providers/dns/rackspace/rackspace.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v4.0.0-20260617152008-dc5086ed13b4Review772026-06-20

Block this in CI

PkgRadar gates github.com/dregor/lego/v4 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/dregor/lego/[email protected]