PkgRadar

Go modules · proxy.golang.org

github.com/openshift/api

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20250709131653-c8a59d3d0c6f

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/openshift/[email protected]/kubecontrolplane/v1/zz_generated.swagger_doc_generated.go
mediumRemote Payloadmatched "cURL " · github.com/openshift/[email protected]/legacyconfig/v1/zz_generated.swagger_doc_generated.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/openshift/[email protected]/operator/v1/zz_generated.swagger_doc_generated.go
mediumRemote Payloadmatched "cURL " · github.com/openshift/[email protected]/osin/v1/zz_generated.swagger_doc_generated.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20250709131653-c8a59d3d0c6fHigh risk482026-06-03
v0.0.0-20210722112356-1903575adaffHigh risk362026-06-03
v0.0.0-20260520140448-0ed3b0125858High risk482026-06-02
v0.0.0-20191015204012-3f47c9a8fa7fReview242026-06-02
v0.0.2-0.20260528061300-9f553042f9aeHigh risk482026-06-01
v0.0.0-20260528061300-9f553042f9aeHigh risk482026-05-30
v0.0.0-20251215212643-7bff45f135d3High risk482026-05-30
v0.0.0-20241205104224-880b37e2ee76Review482026-05-30

Block this in CI

PkgRadar gates github.com/openshift/api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/openshift/[email protected]