PkgRadar

Go modules · proxy.golang.org

github.com/googlecloudrobotics/core/src

Shell Credential File Read

Why PkgRadar flagged v0.0.0-20260624102035-dfaceb175859

SeveritySignalEvidence
highShell Credential File Readgithub.com/googlecloudrobotics/core/[email protected]/go/cmd/token-vendor/main.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260624102035-dfaceb175859High risk452026-06-25
v0.0.0-20260619123736-57dc9e5e09e9Low risk02026-06-20
v0.0.0-20260619105700-0e049daa55bdLow risk02026-06-20
v0.0.0-20260619101026-b8ef3beee1a5Low risk02026-06-20
v0.0.0-20260619074200-c14331159674Low risk02026-06-20
v0.0.0-20260618152910-432822b99587Low risk02026-06-19
v0.0.0-20260617114033-d55fa41f83d2Low risk02026-06-18
v0.0.0-20260617074150-1d7f1147a0e4Low risk02026-06-18
v0.0.0-20260616122755-70c99fe0c5a8Low risk02026-06-17
v0.0.0-20260616083436-de2800ddd192Low risk02026-06-17
v0.0.0-20260616073404-98fb59f0d471Low risk02026-06-17
v0.0.0-20260616065737-12c7c0ee186cLow risk02026-06-17
v0.0.0-20260615145241-00451d832838Low risk02026-06-16
v0.0.0-20260615125946-0ae74996ebe0Low risk02026-06-16
v0.0.0-20260615120721-312ecb0fdf7aLow risk02026-06-16
v0.0.0-20260615103814-5263f92247c4Low risk02026-06-16
v0.0.0-20260615083253-73dcfc766f10Low risk02026-06-16
v0.0.0-20260615061741-e0c955dc5ac3Low risk02026-06-16
v0.0.0-20260612140224-e602623b3d73Low risk02026-06-13
v0.0.0-20260612125855-8e44168a7666Low risk02026-06-13
v0.0.0-20260612123454-a682e73b7f15Low risk02026-06-13
v0.0.0-20260612114609-c12a6a38b04dLow risk02026-06-13
v0.0.0-20260612094010-2ba531fa59d3Low risk02026-06-13
v0.0.0-20260611160809-c3539b25b7e8Low risk02026-06-12
v0.0.0-20260611122242-88ebf0fa16a7Low risk02026-06-12
v0.0.0-20260610203206-4ea0fcae5707Low risk02026-06-11
v0.0.0-20260610101745-b48bee2b6f3eLow risk02026-06-11
v0.0.0-20260609145442-3988a99af29fLow risk02026-06-10
v0.0.0-20260608075303-ce444cabf993Low risk02026-06-09
v0.0.0-20260527142204-816129568b54Low risk02026-05-30
v0.0.0-20260529014855-385573473016Low risk02026-05-30

Block this in CI

PkgRadar gates github.com/googlecloudrobotics/core/src (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/googlecloudrobotics/core/[email protected]