PkgRadar

Go modules · proxy.golang.org

github.com/guancecloud/pipeline-go

Remote Payload: matched "cURL "

Why PkgRadar flagged v1.3.2-0.20260610072326-166a20afc933

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/guancecloud/[email protected]/pkg/arbiter/df-func/dffunc.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.3.2-0.20260610072326-166a20afc933Review122026-06-11
v1.3.2-0.20260610062621-f510e610b06dReview122026-06-11
v1.3.2-0.20260608070623-f9bbb9deb2eaReview122026-06-09
v1.3.2-0.20260607060218-5bbf0640a31aReview122026-06-08
v1.3.2-0.20260607055557-384511f9e085Review122026-06-08
v1.3.2-0.20260606035229-e83f4dda4efaReview122026-06-07
v1.3.2-0.20260603101002-58d46086c6f7Review122026-06-04
v1.3.2-0.20260529081539-97a9c17aadaeReview122026-05-30

Block this in CI

PkgRadar gates github.com/guancecloud/pipeline-go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/guancecloud/[email protected]
Start free — 25 scans / moView full evidence
github.com/guancecloud/pipeline-go — Go modules security scan | PkgRadar