Go modules · proxy.golang.org

github.com/oracle/crossplane-provider-oci

Shell Credential File Read, Go Generate Shell, Remote Payload +1 more

Why PkgRadar flagged v1.2.0

Severity	Signal	Evidence
high	Shell Credential File Read	github.com/oracle/[email protected]/apis/cluster/database/v1alpha1/zz_cloudvmcluster_types.go
high	Shell Credential File Read	github.com/oracle/[email protected]/apis/cluster/database/v1alpha1/zz_keystore_types.go
high	Shell Credential File Read	github.com/oracle/[email protected]/apis/cluster/database/v1alpha1/zz_toolsdatabasetoolsconnection_types.go
high	Shell Credential File Read	github.com/oracle/[email protected]/apis/namespaced/database/v1alpha1/zz_cloudvmcluster_types.go
high	Shell Credential File Read	github.com/oracle/[email protected]/apis/namespaced/database/v1alpha1/zz_keystore_types.go
high	Shell Credential File Read	github.com/oracle/[email protected]/apis/namespaced/database/v1alpha1/zz_toolsdatabasetoolsconnection_types.go
medium	Go Generate Shell	github.com/oracle/[email protected]/apis/generate.go
medium	Remote Payload	github.com/oracle/[email protected]/apis/cluster/fusionapps/v1alpha1/zz_fusionenvironment_types.go
medium	Remote Payload	github.com/oracle/[email protected]/apis/cluster/fusionapps/v1alpha1/zz_generated.deepcopy.go
medium	Remote Payload	github.com/oracle/[email protected]/apis/namespaced/fusionapps/v1alpha1/zz_fusionenvironment_types.go
medium	Remote Payload	github.com/oracle/[email protected]/apis/namespaced/fusionapps/v1alpha1/zz_generated.deepcopy.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.2.0`	High risk	151	2026-06-26

Block this in CI

PkgRadar gates github.com/oracle/crossplane-provider-oci (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/oracle/[email protected]