PkgRadar

Go modules · proxy.golang.org

github.com/imjoey/terraform

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v0.12.4-0.20190706131813-37a6331ebf0e

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/imjoey/[email protected]/plugin/mock_proto/generate.go
mediumRemote Payloadmatched "curl " · github.com/imjoey/[email protected]/builtin/provisioners/chef/linux_provisioner.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/imjoey/[email protected]/builtin/provisioners/habitat/resource_provisioner.go
mediumRemote Payloadmatched "curl " · github.com/imjoey/[email protected]/builtin/provisioners/puppet/linux_provisioner.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.12.4-0.20190706131813-37a6331ebf0eHigh risk512026-06-03
v0.11.4Review242026-06-03
v0.7.2Review202026-06-03
v0.10.7Review122026-06-03
v0.11.11Review242026-06-03
v0.7.0-rc3Review202026-06-03
v0.12.1Review392026-06-03
v0.9.0-beta1Review202026-06-03
v0.6.11Review252026-06-03
v0.8.0-beta1Review202026-06-03
v0.10.0-beta2Review122026-06-03
v0.7.5Review202026-06-03
v0.6.15Review252026-06-03
v0.10.6Review122026-06-03
v0.7.4Review202026-06-03
v0.11.7Review242026-06-03
v0.7.0Review202026-06-03
v0.7.10Review202026-06-03
v0.12.0-alpha3Review242026-06-03
v0.7.11Review202026-06-03
v0.11.9-beta1Review242026-06-03
v0.10.0-beta1Review122026-06-03
v0.7.8Review202026-06-03
v0.10.0Review122026-06-03
v0.8.0-rc3Review202026-06-03
v0.12.3High risk512026-06-03

Block this in CI

PkgRadar gates github.com/imjoey/terraform (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/imjoey/[email protected]
Start free — 25 scans / moView full evidence