Go modules · proxy.golang.org
github.com/metal-stack/metal-images
Credential file access: matched ".ssh/"
Why PkgRadar flagged v0.0.0-20260610083243-88073c5a2e59
| Severity | Signal | Evidence |
|---|---|---|
| medium | Credential file access | matched ".ssh/" · github.com/metal-stack/[email protected]/cmd/install.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.0-20260610083243-88073c5a2e59 | Review | 10 | 2026-06-12 |
v0.0.0-20260602084853-eac31b35622c | Review | 10 | 2026-06-08 |
v0.0.0-20260529093003-40bb980d31d9 | Review | 10 | 2026-05-30 |
v0.0.0-20260529065808-43f4eb3a48d4 | Review | 10 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem go github.com/metal-stack/[email protected]