Go modules · proxy.golang.org

github.com/nvidia/aicr

Tls Verification Disabled, Remote Payload, Credential file access +1 more

Why PkgRadar flagged v0.20.1-0.20260829173525-dcad82bb2057

Severity	Signal
medium	Tls Verification Disabled ×2
medium	Remote Payload ×3

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.20.1-0.20260829173525-dcad82bb2057`	Review	51	2026-08-30
`v0.20.1-0.20260824184716-534a9f509600`	Review	51	2026-08-25
`v0.19.1-0.20260822132757-709b17939b5c`	Review	51	2026-08-24
`v0.12.2-0.20260515145754-6ffbd88110bf`	Review	15	2026-08-14
`v0.14.1-0.20260611210317-fd64dd7a55aa`	Review	27	2026-08-14
`v0.19.1-0.20260810235719-d6b3bc4d8a8d`	Review	51	2026-08-12
`v0.19.1-0.20260810200449-9198f36112cf`	Review	51	2026-08-11
`v0.19.1-0.20260810192404-dbddffbf5524`	Review	51	2026-08-11
`v0.19.0`	Review	51	2026-08-11
`v0.19.0-rc1`	Review	51	2026-08-11
`v0.17.1-0.20260715005825-3574f8052671`	Low risk	0	2026-07-16
`v0.17.1-0.20260714142030-f74b1af1d6e8`	Low risk	0	2026-07-16

Block this in CI

PkgRadar gates github.com/nvidia/aicr (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/nvidia/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.