Go modules · proxy.golang.org

github.com/k3s-io/k3s

Tls Verification Disabled, Remote Payload, Credential file access

Why PkgRadar flagged v1.24.9-rc1.0.20221209041337-776beb0e418f

Severity	Signal	Evidence
medium	Tls Verification Disabled	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.24.9-rc1.0.20221209041337-776beb0e418f`	Review	42	2026-07-30
`v1.24.10-0.20221214022828-4dcf0a33bc05`	Review	42	2026-07-30
`v1.34.10-rc2.0.20260728201344-39a4509ed981`	Review	63	2026-07-30
`v1.21.14-0.20220525184941-efc5f1e9ee5a`	Review	39	2026-07-30
`v1.25.7-0.20230119155625-9176e03c5788`	Review	42	2026-07-29
`v1.28.13-0.20240730000017-4717e2a58e04`	Review	66	2026-07-26
`v1.28.11-0.20240517203829-a4c5612ea3dd`	Review	54	2026-07-26
`v1.30.13-0.20250423232754-f9dbf16e17a6`	Review	66	2026-07-23
`v1.30.12-0.20250321203142-c2662fbee6d2`	Review	66	2026-07-23
`v1.30.11-0.20250221021606-b86a69470cd7`	Review	66	2026-07-23
`v1.31.8-0.20250321203153-e050ca66d129`	Review	66	2026-07-22
`v1.36.3-0.20260720191027-4ca29faac89e`

Block this in CI

PkgRadar gates github.com/k3s-io/k3s (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/k3s-io/[email protected]