PkgRadar

Go modules · proxy.golang.org

github.com/elastic/cloud-on-k8s/hack/helm/release

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260616063217-f43f889d9929

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/elastic/cloud-on-k8s/hack/helm/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616063217-f43f889d9929Review152026-06-17
v0.0.0-20260615183934-1d75322b6f81Review152026-06-16
v0.0.0-20260615181056-b95b8a870cf3Review152026-06-16
v0.0.0-20260611134318-583523252720Review152026-06-12
v0.0.0-20260609085252-235a56abe889Review152026-06-10
v0.0.0-20260608142712-bb6f94f9830dReview152026-06-09
v0.0.0-20260603145452-aceb66953866Review152026-06-04
v0.0.0-20260602064831-cb7fb6845711Review152026-06-03
v0.0.0-20260602025158-584db80a6f4dReview152026-06-03
v0.0.0-20260528101531-df841cfa245eReview152026-05-30
v0.0.0-20260528155615-c40a0bb10538Review152026-05-29

Block this in CI

PkgRadar gates github.com/elastic/cloud-on-k8s/hack/helm/release (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/elastic/cloud-on-k8s/hack/helm/[email protected]