PkgRadar

Go modules · proxy.golang.org

github.com/replicatedhq/embedded-cluster

Remote Payload: matched "curl "

Why PkgRadar flagged v1.29.5-0.20260614004559-b6c7c8c3efc1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/replicatedhq/[email protected]/cmd/installer/cli/install.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.29.5-0.20260614004559-b6c7c8c3efc1Review122026-06-15
v0.0.0-20260614004559-b6c7c8c3efc1Review122026-06-15
v1.29.5-0.20260613071908-2d26c7fdeb0fReview122026-06-14
v0.0.0-20260613071908-2d26c7fdeb0fReview122026-06-14
v1.29.5-0.20260611131827-8dad11d10f9bReview122026-06-12
v1.29.5-0.20260607072417-c9cb611b6037Review122026-06-08
v0.0.0-20260607072417-c9cb611b6037Review122026-06-08
v1.29.5-0.20260607004517-dde2cc7b8448Review122026-06-08
v0.0.0-20260607004517-dde2cc7b8448Review122026-06-08
v1.29.5-0.20260605124339-ae8c5209f397Review122026-06-06
v0.0.0-20260605124339-ae8c5209f397Review122026-06-06
v1.29.5-0.20260604073809-7ffc30e75f4eReview122026-06-05
v0.0.0-20260604073809-7ffc30e75f4eReview122026-06-05
v0.0.0-20260603150250-45984944839bReview122026-06-04
v1.29.5-0.20260602131557-01970fd4a9f5Review122026-06-03
v0.0.0-20260602131557-01970fd4a9f5Review122026-06-03
v1.29.5-0.20260531004320-e8b877c945e2Review122026-06-01
v0.0.0-20260531004320-e8b877c945e2Review122026-06-01
v1.29.5-0.20260530070047-7ed7c575ebb7Review122026-05-31
v0.0.0-20260530070047-7ed7c575ebb7Review122026-05-31

Block this in CI

PkgRadar gates github.com/replicatedhq/embedded-cluster (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/replicatedhq/[email protected]