PkgRadar

Go modules · proxy.golang.org

github.com/harrisonwaffel/rancher

Remote Payload: matched "wGet "

Why PkgRadar flagged v0.0.0-20260611142946-c4c6d2759dcd

SeveritySignalEvidence
mediumRemote Payloadmatched "wGet " · github.com/harrisonwaffel/[email protected]/pkg/api/steve/disallow/disallow.go
mediumRemote Payloadmatched "curl " · github.com/harrisonwaffel/[email protected]/pkg/capr/planner/instructions.go
mediumRemote Payloadmatched "curl " · github.com/harrisonwaffel/[email protected]/pkg/controllers/dashboard/clusterregistrationtoken/status.go
mediumRemote Payloadmatched "github.com/rancher-plugins/kontainer-engine-driver-oke/releases/download" · github.com/harrisonwaffel/[email protected]/pkg/data/management/kontainerdriver_data.go
mediumRemote Payloadmatched "github.com/cloudscale-ch/docker-machine-driver-cloudscale/releases/download" · github.com/harrisonwaffel/[email protected]/pkg/data/management/machinedriver_data.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/harrisonwaffel/[email protected]/pkg/image/appco/load.go
mediumRemote Payloadmatched "github.com/rancher/rke2/releases/download" · github.com/harrisonwaffel/[email protected]/pkg/image/external/external.go
mediumRemote Payloadmatched "github.com/rancher/system-agent/releases/download" · github.com/harrisonwaffel/[email protected]/pkg/settings/setting.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260611142946-c4c6d2759dcdHigh risk1112026-06-12
v0.0.0-20260609134014-014e3bf98d2dHigh risk1112026-06-11
v0.0.0-20260608171407-61a344a1604dHigh risk1112026-06-10
v0.0.0-20260605153538-8ad88ead2d42High risk1112026-06-07
v0.0.0-20260604112555-8f7044d5ce14High risk1112026-06-06
v0.0.0-20260528184649-7129318bd34cReview1112026-05-29

Block this in CI

PkgRadar gates github.com/harrisonwaffel/rancher (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/harrisonwaffel/[email protected]