Go modules · proxy.golang.org

github.com/rancher/cluster-api-provider-rke2

Remote Payload, Tls Verification Disabled, Credential file access

Why PkgRadar flagged v0.25.1-0.20260727171046-41dc6f8a5b62

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.25.1-0.20260727171046-41dc6f8a5b62`	Review	50	2026-07-28
`v0.0.0-20260727171046-41dc6f8a5b62`	Review	50	2026-07-28
`v0.25.1-0.20260727145222-b37e5f5b592c`	Review	50	2026-07-28
`v0.0.0-20260727145222-b37e5f5b592c`	Review	50	2026-07-28
`v0.25.1-0.20260714094757-9175c1bcf772`	Review	50	2026-07-15
`v0.0.0-20260714094757-9175c1bcf772`	Review	50	2026-07-15
`v0.25.1-0.20260708062941-5f0359c1deeb`	Review	50	2026-07-09
`v0.0.0-20260708062941-5f0359c1deeb`	Review	50	2026-07-09
`v0.25.1-0.20260706083140-d0b33a7acdee`	Review	50	2026-07-07
`v0.0.0-20260706083140-d0b33a7acdee`	Review	50	2026-07-07
`v0.25.1-0.20260702081606-d798351d261b`	Review	50	2026-07-03
`v0.0.0-20260702081606-d798351d261b`	Review	50

Block this in CI

PkgRadar gates github.com/rancher/cluster-api-provider-rke2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/rancher/[email protected]