Go modules · proxy.golang.org

github.com/microsoft/azure-linux-dev-tools

Remote Payload, Credential file access

Why PkgRadar flagged v0.4.0

Severity	Signal
medium	Remote Payload ×11

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.4.0`	Review	29	2026-09-02
`v0.3.1-0.20260901183338-7d58551d347d`	Review	29	2026-09-02
`v0.3.1-0.20260901161635-86bf3523c4f0`	Review	29	2026-09-02
`v0.3.1-0.20260901170321-aab2581247a7`	Review	29	2026-09-02
`v0.3.1-0.20260827171255-58ef09172fef`	Review	29	2026-08-28
`v0.3.1-0.20260824182642-f48928c29e24`	Review	29	2026-08-25
`v0.3.1-0.20260822002725-8e1b2efc0d48`	Review	29	2026-08-23
`v0.3.1-0.20260821170923-013ed7759705`	Review	29	2026-08-22
`v0.3.1-0.20260820180942-5f66edb7fdb4`	Review	29	2026-08-21
`v0.3.1-0.20260817170633-e0560ccef61c`	Review	29	2026-08-18
`v0.3.1-0.20260812171813-b7b15d9c700f`	Review	29	2026-08-13
`v0.3.0`	Review	29	2026-08-12

Block this in CI

PkgRadar gates github.com/microsoft/azure-linux-dev-tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/microsoft/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.