PkgRadar

Go modules · proxy.golang.org

github.com/scality/metalk8s/storage-operator

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260528064808-37a723973906

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/scality/metalk8s/[email protected]/test/e2e/e2e_test.go
mediumRemote Payloadmatched "github.com/cert-manager/cert-manager/releases/download" · github.com/scality/metalk8s/[email protected]/test/utils/utils.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260611184515-884e5e7fb626Low risk02026-06-13
v0.0.0-20260605122829-94262a4dfa3eLow risk02026-06-12
v0.0.0-20260528095648-b2b901aad6b3Low risk02026-05-29
v0.0.0-20260528064808-37a723973906Review242026-05-29

Block this in CI

PkgRadar gates github.com/scality/metalk8s/storage-operator (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/scality/metalk8s/[email protected]