Go modules · proxy.golang.org

github.com/portworx/px-backup-api

Remote Payload, Credential file access

Why PkgRadar flagged v1.2.2-0.20260729213330-ff8ca70d33df

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.2.2-0.20260729213330-ff8ca70d33df`	Review	17	2026-07-30
`v1.2.2-0.20260729200226-6ec3d82cd832`	Review	17	2026-07-30
`v1.2.2-0.20260728054509-0af8e8974767`	Review	17	2026-07-29
`v1.2.2-0.20260727203532-2e6f250d0375`	Review	17	2026-07-28
`v1.2.2-0.20260727104232-11c6cd4e4492`	Review	17	2026-07-28
`v1.2.2-0.20260722061455-7b2dde220b80`	Review	17	2026-07-23
`v1.2.2-0.20260706100500-573f3f33d295`	Review	17	2026-07-19
`v1.2.2-0.20260715163701-82483df47dd1`	Review	17	2026-07-16
`v1.2.2-0.20260715063558-49295bdaace5`	Review	17	2026-07-16
`v1.2.2-0.20260713100806-cd32a1d4f95e`	Review	17	2026-07-15
`v1.2.2-0.20260710082229-8510d521e585`	Review	17	2026-07-11
`v1.2.2-0.20260709065123-69dd5945379c`	Review

Block this in CI

PkgRadar gates github.com/portworx/px-backup-api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/portworx/[email protected]