Go modules · proxy.golang.org

github.com/ondrejbudai/osbuild-composer-public

Tls Verification Disabled, Credential file access, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260728021116-6c9167ed9dda

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260728021116-6c9167ed9dda`	Review	25	2026-07-29
`v0.0.0-20260725022257-a3399c5fc9f0`	Review	25	2026-07-26
`v0.0.0-20260718020734-1833591e008d`	Review	25	2026-07-19
`v0.0.0-20260717022316-094469f3c943`	Review	25	2026-07-18
`v0.0.0-20260716022022-6081d1572129`	Review	25	2026-07-17
`v0.0.0-20260710024233-41c25333beae`	Review	25	2026-07-11
`v0.0.0-20260709023942-365789510bf2`	Review	25	2026-07-10
`v0.0.0-20260707024749-6699ce291a8e`	Review	25	2026-07-09
`v0.0.0-20260701004818-fb21df0cf97e`	Review	25	2026-07-02
`v0.0.0-20260625004612-21e6287a219c`	Review	11	2026-06-26
`v0.0.0-20260623004541-45339948524a`	Review	9	2026-06-24
`v0.0.0-20260620004704-50e638f6ce69`	Review	7	2026-06-22

Block this in CI

PkgRadar gates github.com/ondrejbudai/osbuild-composer-public (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ondrejbudai/[email protected]