Go modules · proxy.golang.org

github.com/oluwatobi-mustapha/identrail

Credential file access: matched "AWS_ACCESS_KEY"

Why PkgRadar flagged v0.0.0-20260608182837-6c0cfd004020

Severity	Signal	Evidence
high	Credential file access	matched "AWS_ACCESS_KEY" · github.com/oluwatobi-mustapha/[email protected]/internal/repoexposure/ai_agent_analyzer.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260608182837-6c0cfd004020`	High risk	35	2026-06-11
`v0.0.0-20260606201832-4d015e10bd4f`	High risk	35	2026-06-09
`v0.0.0-20260604092506-9457d70db614`	High risk	35	2026-06-06
`v0.0.0-20260531084544-c179cd49fa5e`	High risk	35	2026-06-01
`v0.0.0-20260527121929-47e8c89fa9aa`	High risk	35	2026-05-30

Block this in CI

PkgRadar gates github.com/oluwatobi-mustapha/identrail (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/oluwatobi-mustapha/[email protected]