PkgRadar

Go modules · proxy.golang.org

github.com/google/device-infra/src/devtools/rbe

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260528034357-fc163d9b205b

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/google/device-infra/src/devtools/[email protected]/casdownloader/adc_credentials.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616074711-b5d3b5bfd48dLow risk02026-06-17
v0.0.0-20260616073358-c8b687a2717eLow risk02026-06-17
v0.0.0-20260616064224-e3578922451bLow risk02026-06-17
v0.0.0-20260616054252-725c97c0be61Low risk02026-06-17
v0.0.0-20260615134513-5cbb97ac26b0Low risk02026-06-16
v0.0.0-20260615063756-54ca7f83463cLow risk02026-06-16
v0.0.0-20260615044644-f0f35e0bf4e9Low risk02026-06-16
v0.0.0-20260615043818-c83abf911236Low risk02026-06-16
v0.0.0-20260615035837-ce90d469cff1Low risk02026-06-16
v0.0.0-20260613192338-a61d00691d69Low risk02026-06-14
v0.0.0-20260613003030-a9832706b138Low risk02026-06-14
v0.0.0-20260612112046-0a1f4b5e36f6Low risk02026-06-13
v0.0.0-20260612085723-3b6ba03ce7c5Low risk02026-06-13
v0.0.0-20260612063753-84db29b5ed83Low risk02026-06-13
v0.0.0-20260612045857-0f78390544a5Low risk02026-06-13
v0.0.0-20260612015831-9b970c87af01Low risk02026-06-13
v0.0.0-20260611133833-55f853454df0Low risk02026-06-12
v0.0.0-20260611085843-0ea75cd7baacLow risk02026-06-12
v0.0.0-20260611053432-f4530a9204adLow risk02026-06-12
v0.0.0-20260610092709-87ded1dd95c4Low risk02026-06-11
v0.0.0-20260610075555-6b92574f798dLow risk02026-06-11
v0.0.0-20260610070206-dd029ffbdd1bLow risk02026-06-11
v0.0.0-20260610063916-458bd4040256Low risk02026-06-11
v0.0.0-20260610051828-28c312167092Low risk02026-06-11
v0.0.0-20260610034931-ffb54efd1047Low risk02026-06-11
v0.0.0-20260609154713-77fadf03273cLow risk02026-06-10
v0.0.0-20260609135225-69bf279091d5Low risk02026-06-10
v0.0.0-20260609083126-b022ee4b5ebdLow risk02026-06-10
v0.0.0-20260608170623-a9c8edff6bd4Low risk02026-06-09
v0.0.0-20260608161737-4442276ee9b1Low risk02026-06-09
v0.0.0-20260608143505-01f319cd1a26Low risk02026-06-09
v0.0.0-20260608132348-71fe201b2df2Low risk02026-06-09
v0.0.0-20260608111642-b78e25e6fbbeLow risk02026-06-09
v0.0.0-20260608102154-7e7608e7d604Low risk02026-06-09
v0.0.0-20260608075509-cd6b8ef8a267Low risk02026-06-09
v0.0.0-20260608065355-5b75fcf405b8Low risk02026-06-09
v0.0.0-20260608021304-955765d33252Low risk02026-06-09
v0.0.0-20260607040755-385480b4197aLow risk02026-06-08
v0.0.0-20260606155130-48cb202b6163Low risk02026-06-07
v0.0.0-20260605110223-6d720ebd7f9aLow risk02026-06-06
v0.0.0-20260605095516-4c5b952056ffLow risk02026-06-06
v0.0.0-20260605073913-c13a0523bc32Low risk02026-06-06
v0.0.0-20260605060958-4bc726bc5d11Low risk02026-06-06
v0.0.0-20260605034323-6e942935ffa0Low risk02026-06-06
v0.0.0-20260604141537-63a434ec48a8Low risk02026-06-05
v0.0.0-20260604034521-07d0e66a5cdfLow risk02026-06-05
v0.0.0-20260603062728-fdcd52971845Low risk02026-06-04
v0.0.0-20260603035156-12a2a5dde676Low risk02026-06-04
v0.0.0-20260602071726-902f3005229bLow risk02026-06-03
v0.0.0-20260602062039-495aea3cbc66Low risk02026-06-03
v0.0.0-20260601133709-0f62cc86fde1Low risk02026-06-02
v0.0.0-20260601130322-707846e67eb8Low risk02026-06-02
v0.0.0-20260601104922-9371782f81f7Low risk02026-06-02
v0.0.0-20260601093703-572ad0bec62fLow risk02026-06-02
v0.0.0-20260601075707-3a8132aa247dLow risk02026-06-02
v0.0.0-20260601073214-6c33c28af6f6Low risk02026-06-02
v0.0.0-20260601064112-054a980d8286Low risk02026-06-02
v0.0.0-20260601042342-bb88c11b0016Low risk02026-06-02
v0.0.0-20260601032314-33e57dae39bdLow risk02026-06-02
v0.0.0-20260530121523-3e6176370f09Low risk02026-05-31
v0.0.0-20260529110836-5d46d9932397Low risk02026-05-30
v0.0.0-20260528073106-4cf937ce300bLow risk02026-05-29
v0.0.0-20260528034357-fc163d9b205bReview172026-05-29

Block this in CI

PkgRadar gates github.com/google/device-infra/src/devtools/rbe (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/google/device-infra/src/devtools/[email protected]