Go modules · proxy.golang.org

github.com/rancher/shepherd

Tls Verification Disabled, Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260731140943-06d45e485aaa

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260731140943-06d45e485aaa`	Review	99	2026-08-01
`v0.0.0-20260731140928-c3e49acaa50b`	Review	87	2026-08-01
`v0.0.0-20260731140910-2f08bf391e77`	Review	75	2026-08-01
`v0.0.0-20260731140845-aff5061e64c3`	Review	75	2026-08-01
`v0.0.0-20260724151839-d75a9f2b935d`	Review	94	2026-07-25
`v0.0.0-20260716161016-0b5b0d2871ad`	Review	94	2026-07-17
`v0.0.0-20260716161008-55dc05ed8d66`	Review	87	2026-07-17
`v0.0.0-20260716161005-da5dd2f5f3ae`	Review	75	2026-07-17
`v0.0.0-20260716161010-2ba613fb9588`	Review	99	2026-07-17
`v0.0.0-20260716161001-82f476ea5211`	Review	75	2026-07-17
`v0.0.0-20240730155158-b671b952501c`	Review	38	2026-06-29
`v0.0.0-20260617131159-a44715e8122c`	Review	3	2026-06-18

Block this in CI

PkgRadar gates github.com/rancher/shepherd (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/rancher/[email protected]