PkgRadar

Go modules · proxy.golang.org

github.com/kubernetes/autoscaler/cluster-autoscaler

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v0.0.0-20260611203251-193877ee20c1

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/kubernetes/autoscaler/[email protected]/cloudprovider/azure/azure_client.go
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/kubernetes/autoscaler/[email protected]/cloudprovider/azure/azure_vmss_delete_client.go
mediumRemote Payloadmatched "cURL " · github.com/kubernetes/autoscaler/[email protected]/cloudprovider/magnum/gophercloud/openstack/identity/v2/tokens/results.go
mediumRemote Payloadmatched "cUrl " · github.com/kubernetes/autoscaler/[email protected]/cloudprovider/tencentcloud/tencentcloud-sdk-go/cvm/v20170312/models.go
mediumRemote Payloadmatched "cUrl " · github.com/kubernetes/autoscaler/[email protected]/cloudprovider/volcengine/volcengine-go-sdk/service/ecs/api_describe_instance_vnc_url.go
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/kubernetes/autoscaler/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260611203251-193877ee20c1High risk892026-06-12
v0.0.0-20260611174243-086fa0e7f8b4High risk892026-06-12
v0.0.0-20260610231048-dd8909901b1bHigh risk892026-06-11
v0.0.0-20260610200504-1a15d05dd371High risk892026-06-11
v0.0.0-20260610133557-09eb49054962High risk892026-06-11
v0.0.0-20260610125405-6eba4dbf1e81High risk892026-06-11
v0.0.0-20260610120806-e80039d84b65High risk892026-06-11
v0.0.0-20260608193746-b74d47443217High risk892026-06-10
v0.0.0-20260608071229-1bebc53922d0High risk892026-06-09
v0.0.0-20260606134030-8e74622236e4High risk892026-06-08
v0.0.0-20260605152955-6fb15e947e1bHigh risk892026-06-06
v0.0.0-20260605071755-3bef26753515High risk892026-06-06
v0.0.0-20260604102946-63e27f838f84High risk892026-06-06
v0.0.0-20260602131347-ae69598ecaefHigh risk892026-06-03
v0.0.0-20260601201852-16d244f6467dHigh risk892026-06-03
v0.0.0-20260601101650-2a1782e87affHigh risk892026-06-02
v0.0.0-20260601074651-7c2dd98dde21High risk892026-06-02
v0.0.0-20260530144647-1c15fc68567fHigh risk892026-06-01
v0.0.0-20260528184649-439373c6db29Review892026-05-30
v0.0.0-20260528083050-a33dd7a1ffdaReview892026-05-29

Block this in CI

PkgRadar gates github.com/kubernetes/autoscaler/cluster-autoscaler (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kubernetes/autoscaler/[email protected]