Go modules · proxy.golang.org

github.com/osbuild/image-builder

Tls Verification Disabled, Remote Payload, Credential file access +1 more

Why PkgRadar flagged v0.274.1-0.20260720124644-25dd8be4c09d

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.274.1-0.20260720124644-25dd8be4c09d`	Review	46	2026-07-21
`v0.274.1-0.20260719051740-e061982be5ff`	Review	46	2026-07-20
`v0.274.1-0.20260630042837-7ded70cacda9`	Review	58	2026-07-01
`v0.274.1-0.20260629174456-846c12f1182d`	Review	58	2026-06-30
`v0.274.1-0.20260629094610-ffecff3b9657`	Review	58	2026-06-30
`v0.274.1-0.20260626103622-dda8b67cfb73`	Review	58	2026-06-27
`v0.274.1-0.20260624044055-0bfdfd72d583`	Review	34	2026-06-25
`v0.270.1-0.20260604173428-234c82f9b7df`	Review	34	2026-06-24
`v0.274.1-0.20260619144142-ad5a61793772`	Review	28	2026-06-21
`v0.274.1-0.20260619132826-12e1791381d3`	Review	23	2026-06-20
`v0.136.0`	Review	9	2026-06-19
`v0.235.0`	Review	11	2026-06-19

Block this in CI

PkgRadar gates github.com/osbuild/image-builder (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/osbuild/[email protected]