Go modules · proxy.golang.org

github.com/nvidia/nvcf/src/control-plane-services/helm-reval

Tls Verification Disabled

Why PkgRadar flagged v0.0.0-20260619084732-7a92c98ae348

Severity	Signal	Evidence
medium	Tls Verification Disabled	github.com/nvidia/nvcf/src/control-plane-services/[email protected]/reval/run.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260619084732-7a92c98ae348`	Review	12	2026-06-22
`v0.0.0-20260617051016-799a7670ccf5`	Low risk	0	2026-06-19
`v0.0.0-20260615225702-52dd21330050`	Low risk	0	2026-06-17
`v0.0.0-20260612195734-0eb6287f001a`	Low risk	0	2026-06-13
`v0.0.0-20260612164218-eaa86cca5425`	Low risk	0	2026-06-13
`v0.0.0-20260611172741-1697734f20f1`	Low risk	0	2026-06-12
`v0.0.0-20260609233324-b7cf194713cc`	Low risk	0	2026-06-11
`v0.0.0-20260609203347-51ff765c4662`	Low risk	0	2026-06-10
`v0.0.0-20260607045420-c0de0100ed7c`	Low risk	0	2026-06-09
`v0.0.0-20260605201624-bb7c2a29be73`	Low risk	0	2026-06-06
`v0.0.0-20260603044103-f1c916f1e3f8`	Low risk	0	2026-06-04
`v0.0.0-20260530010918-7915b9913b9b`	Low risk	0	2026-06-01
`v0.0.0-20260529051301-33ccea65ca01`	Low risk	0	2026-05-30
`v0.0.0-20260529002900-38c02a897078`	Low risk	0	2026-05-30

Block this in CI

PkgRadar gates github.com/nvidia/nvcf/src/control-plane-services/helm-reval (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/nvidia/nvcf/src/control-plane-services/[email protected]