Go modules · proxy.golang.org

github.com/edgexfoundry/edgex-go

Tls Verification Disabled

Why PkgRadar flagged v1.3.1-0.20230207230101-7290d2ed4a96

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.3.1-0.20250115192412-3862fc7369db`	Low risk	0	2026-08-17
`v1.3.1-0.20250115032238-1371a7d04723`	Low risk	0	2026-08-17
`v1.3.1-0.20250110041829-2a92b0a04701`	Low risk	0	2026-08-17
`v1.3.1-0.20241107102936-82df6aa76d7e`	Low risk	0	2026-08-16
`v1.3.1-0.20241021100347-803138eab892`	Low risk	0	2026-08-16
`v1.3.1-0.20260815035621-c3e5490eb473`	Low risk	0	2026-08-16
`v1.3.1-0.20250121111909-a1c5a899654e`	Low risk	0	2026-08-15
`v1.3.1-0.20250115065140-623cb5265308`	Low risk	0	2026-08-15
`v1.3.1-0.20250113064852-abfbcc6e8f6a`	Low risk	0	2026-08-15
`v1.3.1-0.20250212072515-c067ea6d19c3`	Low risk	0	2026-08-12
`v1.3.1-0.20230207230101-7290d2ed4a96`	Review	12	2026-08-12
`v1.3.1-0.20230530145823-1fb6775d8804`	Low risk

Block this in CI

PkgRadar gates github.com/edgexfoundry/edgex-go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/edgexfoundry/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.