Go modules · proxy.golang.org

github.com/osbuild/images

Tls Verification Disabled, Remote Payload, Credential file access +1 more

Why PkgRadar flagged v0.274.1-0.20260731053644-563519a7e06a

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.274.1-0.20260731053644-563519a7e06a`	Review	46	2026-08-01
`v0.245.2-0.20260731173023-61b16700ffae`	Review	46	2026-08-01
`v0.274.1-0.20260729103955-ae79efd642b9`	Review	46	2026-07-31
`v0.274.1-0.20260728172640-a52448962e0b`	Review	46	2026-07-30
`v0.0.0-20260720124644-25dd8be4c09d`	Review	46	2026-07-22
`v0.274.1-0.20260720124644-25dd8be4c09d`	Review	46	2026-07-21
`v0.0.0-20260612202143-1146ec23cd9c`	Review	46	2026-07-20
`v0.274.1-0.20260719051740-e061982be5ff`	Review	46	2026-07-20
`v0.274.1-0.20260717053148-ec0621471ddc`	Review	46	2026-07-19
`v0.274.1-0.20260715185725-b3b7c128c6a3`	Review	46	2026-07-18
`v0.274.1-0.20260630042837-7ded70cacda9`	Review	41	2026-07-01
`v0.274.1-0.20260626103622-dda8b67cfb73`	Review

Block this in CI

PkgRadar gates github.com/osbuild/images (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/osbuild/[email protected]