Go modules · proxy.golang.org

github.com/siderolabs/talos

Remote Payload, Tls Verification Disabled, Credential file access

Why PkgRadar flagged v1.14.0-beta.0.0.20260728192318-28e7a87424ab

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.14.0-beta.0.0.20260728192318-28e7a87424ab`	Review	63	2026-07-30
`v0.0.0-20260728192318-28e7a87424ab`	Review	63	2026-07-30
`v1.14.0-beta.0.0.20260728182508-b1bdc8c071be`	Review	63	2026-07-29
`v0.0.0-20260728182508-b1bdc8c071be`	Review	63	2026-07-29
`v1.14.0-beta.0.0.20260728172155-7533057a7df4`	Review	63	2026-07-29
`v0.0.0-20260728172155-7533057a7df4`	Review	63	2026-07-29
`v1.14.0-beta.0.0.20260728163716-a9478370497f`	Review	63	2026-07-29
`v0.0.0-20260728163716-a9478370497f`	Review	63	2026-07-29
`v0.0.0-20260728123041-6f17c5033b9e`	Review	63	2026-07-29
`v1.14.0-beta.0.0.20260728123041-6f17c5033b9e`	Review	63	2026-07-29
`v1.14.0-beta.0.0.20260728114342-570fe34f085e`	Review	63	2026-07-29
`v0.0.0-20260728114342-570fe34f085e`

Block this in CI

PkgRadar gates github.com/siderolabs/talos (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/siderolabs/[email protected]