Go modules · proxy.golang.org

github.com/patriceckhart/zot

Tls Verification Disabled, Remote Payload, Credential file access +1 more

Why PkgRadar flagged v0.3.9

Severity	Signal	Evidence
medium	Tls Verification Disabled	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.3.9`	Review	34	2026-07-27
`v0.3.13`	Review	34	2026-07-27
`v0.3.13-0.20260726193555-7792f998e4a5`	Review	34	2026-07-27
`v0.3.12`	Review	34	2026-07-27
`v0.3.11`	Review	34	2026-07-27
`v0.3.10`	Review	34	2026-07-27
`v0.3.6`	Review	34	2026-07-26
`v0.3.8`	Review	34	2026-07-26
`v0.3.5`	Review	34	2026-07-26
`v0.3.7`	Review	34	2026-07-26
`v0.3.4`	Review	34	2026-07-25
`v0.2.95`	Review	34	2026-07-22
`v0.2.99`	Review	34	2026-07-22
`v0.2.98`	Review	34	2026-07-22
`v0.2.97`	Review	34	2026-07-22

Block this in CI

PkgRadar gates github.com/patriceckhart/zot (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/patriceckhart/[email protected]