Go modules · proxy.golang.org

github.com/google/go-cloud

Remote Payload, Credential file access

Why PkgRadar flagged v0.46.1-0.20260831185255-5dbc7ebd76f4

Severity	Signal
medium	Remote Payload ×3

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.46.1-0.20260831185255-5dbc7ebd76f4`	Review	29	2026-09-02
`v0.0.0-20260831185255-5dbc7ebd76f4`	Review	29	2026-09-02
`v0.0.0-20260829172244-2d5ab8f9af5c`	Review	29	2026-08-31
`v0.46.1-0.20260829172244-2d5ab8f9af5c`	Review	29	2026-08-30
`v0.4.1-0.20181030013837-11bb776c80e5`	Low risk	0	2026-08-30
`v0.46.1-0.20260824175844-12ac9a59de67`	Review	29	2026-08-25
`v0.0.0-20180619212614-37d76e0941c3`	Low risk	0	2026-08-25
`v0.2.1-0.20180907223147-c8c138e5724f`	Low risk	0	2026-08-22
`v0.4.1-0.20181107223338-6e352638b015`	Low risk	0	2026-08-20
`v0.2.1-0.20180917221702-db4ba4430ed0`	Low risk	0	2026-08-19
`v0.0.0-20260814001001-29ba3487e2e1`	Review	29	2026-08-17
`v0.46.1-0.20260814001001-29ba3487e2e1`	Review	29

Block this in CI

PkgRadar gates github.com/google/go-cloud (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/google/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.