Go modules · proxy.golang.org
github.com/petar-djukic/cobbler-scaffold
Go Init Env Token Exfil: Go init() reads CI / npm / cloud env tokens AND has network/exec on the same scope — canonical credential-exfil shape.
Why PkgRadar flagged v0.20260530.1
| Severity | Signal | Evidence |
|---|---|---|
| high | Go Init Env Token Exfil | Go init() reads CI / npm / cloud env tokens AND has network/exec on the same scope — canonical credential-exfil shape. · github.com/petar-djukic/[email protected]/pkg/orchestrator/commands.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.20260530.1 | High risk | 45 | 2026-06-02 |
Block this in CI
pkgradar gate --ecosystem go github.com/petar-djukic/[email protected]