Go modules · proxy.golang.org

github.com/fairwindsops/polaris

Tls Verification Disabled, Credential file access

Why PkgRadar flagged v0.0.0-20260806161001-dafa0b74fc09

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260806161001-dafa0b74fc09`	Review	18	2026-08-07
`v0.0.0-20260806122630-f0a370c7578e`	Review	18	2026-08-07
`v0.0.0-20260806121418-cb741e3eb13a`	Review	18	2026-08-07
`v0.0.0-20260805141249-31bc0fdb8498`	Review	18	2026-08-06
`v0.0.0-20260803140311-292a1c257cc7`	Review	18	2026-08-04
`v0.0.0-20260721161925-4bdf5315b6a8`	Review	18	2026-07-22
`v0.0.0-20200520144008-f4fc7c1b5d9b`	Low risk	0	2026-07-18
`v0.0.0-20200113173454-5cd52242c48a`	Low risk	0	2026-07-18
`v0.0.0-20260706210958-278cb9008ca8`	Low risk	0	2026-07-07
`v0.0.0-20260706203637-d6858e0fe430`	Low risk	0	2026-07-07
`v0.0.0-20260706203343-78fe4cb11c63`	Low risk	0	2026-07-07
`v0.0.0-20260701114646-387e787a40c9`	Low risk	0	2026-07-02

Block this in CI

PkgRadar gates github.com/fairwindsops/polaris (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/fairwindsops/[email protected]