PkgRadar

Go modules · proxy.golang.org

github.com/googlecloudplatform/cloud-image-tests

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260612185700-819379885c12

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/googlecloudplatform/[email protected]/test_suites/metadata/setup.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612185700-819379885c12Review172026-06-13
v0.0.0-20260612181839-cfc1592ca20bReview172026-06-13
v0.0.0-20260612172850-9cfc9df56e44Review172026-06-13
v0.0.0-20260610214951-6072eace6a52Review172026-06-11
v0.0.0-20260609220652-04bc4392372cReview172026-06-10
v0.0.0-20260609202502-87138ba1193cReview172026-06-10
v0.0.0-20260609190213-a227beac28efReview172026-06-10
v0.0.0-20260609170411-d1e85784b320Review172026-06-10
v0.0.0-20260605200019-df9643b467f5Review172026-06-06
v0.0.0-20260605001906-e72f2bf1bf29Review172026-06-06
v0.0.0-20260602014929-8ebe3c1e41aaReview172026-06-03

Block this in CI

PkgRadar gates github.com/googlecloudplatform/cloud-image-tests (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/googlecloudplatform/[email protected]