PkgRadar

Go modules · proxy.golang.org

github.com/osbuild/osbuild-composer

Credential file access: matched "AWS_ACCESS_KEY"

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616095224-31b0cea61542Review132026-06-17
v0.0.0-20191031220532-d9e3f1f17361Low risk02026-06-16
v0.0.0-20260610112945-c6d88ff26e0dReview132026-06-11
v0.0.0-20260609152329-c80781671d8eReview132026-06-10
v0.0.0-20260609081944-8652198d5e01Review132026-06-10
v0.0.0-20260608164731-d58861feac8aReview132026-06-09
v0.0.0-20260608161842-2c27e540e261Review132026-06-09
v0.0.0-20260605082223-cde4082e125eReview132026-06-06
v0.0.0-20260602110029-702fcb3db609Review132026-06-03
v0.0.0-20260531183837-530a8a7fe796Review132026-06-01
v0.0.0-20260531111408-20f0b948746cReview132026-06-01
v0.0.0-20260531093606-df02909df958Review132026-06-01
v0.0.0-20260530132227-457872f06ad0Review132026-05-31
v0.0.0-20260530064139-31f75eac8accReview132026-05-31

Block this in CI

PkgRadar gates github.com/osbuild/osbuild-composer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/osbuild/[email protected]
Start free — 25 scans / moView full evidence
github.com/osbuild/osbuild-composer — Go modules security scan | PkgRadar