PkgRadar

Go modules · proxy.golang.org

github.com/kubestellar/console

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.3.30-0.20260531094328-e1d1d793e8c4

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/kubestellar/[email protected]/pkg/agent/server_argocd.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/kubestellar/[email protected]/pkg/api/handlers/missions.go
mediumRemote Payloadmatched "curl " · github.com/kubestellar/[email protected]/pkg/k8s/client_gpu_cronjob.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.3.30-0.20260531094328-e1d1d793e8c4High risk422026-06-01
v0.3.29High risk422026-06-01
v0.3.29-nightly.20260525Review362026-05-30
v0.3.29-nightly.20260526Review362026-05-30
v0.3.29-nightly.20260529Review362026-05-30
v0.3.29-nightly.20260528.0.20260529001022-1ea81050ea87Review362026-05-30
v0.3.28Review362026-05-30

Block this in CI

PkgRadar gates github.com/kubestellar/console (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kubestellar/[email protected]