Go modules · proxy.golang.org

github.com/microsoft/vso-task-lib

Credential file access

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260811024832-c377a1115fdc`	Low risk	0	2026-08-12
`v0.0.0-20260802114834-1ab7e1f0699c`	Low risk	0	2026-08-04
`v0.0.0-20260731093505-5076da221d86`	Low risk	0	2026-08-02
`v0.0.0-20260729133552-b5ef8ae98f44`	Low risk	0	2026-07-30
`v0.0.0-20260729095600-5417af24735e`	Low risk	0	2026-07-30
`v0.0.0-20260729090915-255344737903`	Review	3	2026-07-30
`v0.0.0-20260729082525-c7d695c687d6`	Review	3	2026-07-30
`v0.0.0-20260729071341-62d740de3960`	Review	3	2026-07-30
`v0.0.0-20260728081356-54bbefdab770`	Review	3	2026-07-30
`v0.0.0-20260721082111-70fc78360b31`	Low risk	0	2026-07-22
`v0.0.0-20260702061944-846e68be4201`	Low risk	0	2026-07-13

Block this in CI

PkgRadar gates github.com/microsoft/vso-task-lib (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/microsoft/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.