PkgRadar

Go modules · proxy.golang.org

github.com/noahingh/argo

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20200831220229-5b5d2359ef9f

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/noahingh/[email protected]/go.sum
mediumCredential file accessmatched "id_rsa" · github.com/noahingh/[email protected]/workflow/artifacts/git/git.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20200831220229-5b5d2359ef9fReview222026-06-13
v2.1.0-beta2+incompatibleLow risk02026-06-13
v0.4.0-alpha1Review52026-06-13
v2.3.0+incompatibleReview102026-06-13
v2.3.0-rc2+incompatibleReview102026-06-13
v0.4.3Review52026-06-13
v0.4.6Review52026-06-13
v2.0.0+incompatibleLow risk02026-06-13
v2.0.0-beta1+incompatibleLow risk02026-06-13
v2.1.0-beta1+incompatibleLow risk02026-06-13
v2.3.0-rc1+incompatibleReview102026-06-13
v0.3.0Review52026-06-13
v2.0.0-alpha2+incompatibleLow risk02026-06-13
v0.4.1Review52026-06-13
v0.4.0Review52026-06-13
v0.4.4Review52026-06-13
v0.4.5Review52026-06-13
v2.1.0+incompatibleLow risk02026-06-13
v0.3.3Review52026-06-13
v2.4.0-rc1+incompatibleReview102026-06-13
v2.0.0-alpha1+incompatibleLow risk02026-06-13
v2.2.0+incompatibleLow risk02026-06-13

Block this in CI

PkgRadar gates github.com/noahingh/argo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/noahingh/[email protected]