PkgRadar

Go modules · proxy.golang.org

github.com/kumparan/go-connect

Tls Verification Disabled: matched "InsecureSkipVerify: true"

Why PkgRadar flagged v1.29.1-0.20260619080943-5fd63c588c0e

SeveritySignalEvidence
mediumTls Verification Disabledmatched "InsecureSkipVerify: true" · github.com/kumparan/[email protected]/elasticsearch_connector.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.29.1-0.20260619080943-5fd63c588c0eReview122026-06-20
v1.29.1-0.20260619080011-766053f73dbcReview122026-06-20
v1.29.1-0.20260619072809-fa3d439f5b34Review122026-06-20
v1.29.1-0.20260612065055-46ef00fad7c6Low risk02026-06-18

Block this in CI

PkgRadar gates github.com/kumparan/go-connect (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kumparan/[email protected]