PkgRadar

Go modules · proxy.golang.org

github.com/microsoft/agent-framework

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260528104531-a84ad42f6d8b

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/microsoft/[email protected]/dotnet/samples/05-end-to-end/AspNetAgentAuthorization/keycloak/setup-redirect-uris.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260602193005-6086a743023cLow risk02026-06-03
v0.0.0-20260602095950-a5f355e04a4cLow risk02026-06-03
v0.0.0-20260602004842-05ebb966cf75Low risk02026-06-03
v0.0.0-20260602000936-c83a944e85e7Low risk02026-06-03
v0.0.0-20260601233019-5d98beddf52dLow risk02026-06-02
v0.0.0-20260601230156-e0d0ad16a06bLow risk02026-06-02
v0.0.0-20260601184345-b298113d15cfLow risk02026-06-02
v0.0.0-20260601132620-78d175a1e20eLow risk02026-06-02
v0.0.0-20260601091826-b59a854fcdb4Low risk02026-06-02
v0.0.0-20260529214140-edcc786651caLow risk02026-05-30
v0.0.0-20260529194207-fa2a6af4434fLow risk02026-05-30
v0.0.0-20260529170912-6510d6e3c89fLow risk02026-05-30
v0.0.0-20260529081113-dd9a4b6321f8Low risk02026-05-30
v0.0.0-20260529000319-1fccf16f1103Low risk02026-05-30
v0.0.0-20260528212631-8ed2159c4b0bLow risk02026-05-29
v0.0.0-20260528200950-b000a2cf514aLow risk02026-05-29
v0.0.0-20260528124133-08abe9e704eaLow risk02026-05-29
v0.0.0-20260528104531-a84ad42f6d8bReview122026-05-29
v0.0.0-20260528100814-55dc3ce734bfReview122026-05-29
v0.0.0-20260528091330-9d8e5ca4f52aReview122026-05-29

Block this in CI

PkgRadar gates github.com/microsoft/agent-framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/microsoft/[email protected]