PkgRadar

Go modules · proxy.golang.org

github.com/jenkins-x-plugins/jx-gitops

Remote Payload: matched "github.com/helmfile/helmfile/releases/download"

Why PkgRadar flagged v1.1.13-0.20260528161643-cc5053c0ccf8

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/helmfile/helmfile/releases/download" · github.com/jenkins-x-plugins/[email protected]/pkg/plugins/helpers.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.1.13-0.20260528161643-cc5053c0ccf8Review122026-05-30
v1.3.0Review122026-05-30

Block this in CI

PkgRadar gates github.com/jenkins-x-plugins/jx-gitops (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jenkins-x-plugins/[email protected]