Go modules · proxy.golang.org

github.com/gruntwork-io/terragrunt

Remote Payload, Credential file access

Why PkgRadar flagged v1.1.3-0.20260730173015-7de08a356cb4

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.1.3-0.20260730173015-7de08a356cb4`	Review	39	2026-07-31
`v0.0.0-20260714140950-19dcb749b4be`	Review	27	2026-07-31
`v1.1.2`	Review	39	2026-07-30
`v1.1.2-0.20260728063237-40a9e719e018`	Review	39	2026-07-29
`v0.0.0-20260728063237-40a9e719e018`	Review	39	2026-07-29
`v1.1.2-0.20260727182513-a580abb92408`	Review	39	2026-07-28
`v0.0.0-20260727182513-a580abb92408`	Review	39	2026-07-28
`v1.1.2-0.20260727163904-e7fc8c376e05`	Review	39	2026-07-28
`v0.0.0-20260727163904-e7fc8c376e05`	Review	39	2026-07-28
`v1.1.2-0.20260727160702-ff1f96db8ed2`	Review	39	2026-07-28
`v1.1.2-0.20260726173707-f23dfe05e4ab`	Review	39	2026-07-28
`v0.0.0-20260724152627-33b9fcef1375`	Review	39	2026-07-25

Block this in CI

PkgRadar gates github.com/gruntwork-io/terragrunt (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/gruntwork-io/[email protected]