PkgRadar

Go modules · proxy.golang.org

github.com/smallstep/certificates

Credential file access: matched ".ssh/"

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.30.3-0.20260611045441-3e9e8bee0cadReview52026-06-12
v0.30.3-0.20260610070840-be187b2b9b31Review52026-06-11
v0.30.3-0.20260609142708-2e23209ac869Review52026-06-11
v0.30.3-0.20260603103502-268b413e0a14Review52026-06-04
v0.30.3-0.20260602222759-eb327f03a7e2Review52026-06-03
v0.30.3-0.20260601103215-a86deefb21d2Review52026-06-03

Block this in CI

PkgRadar gates github.com/smallstep/certificates (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/smallstep/[email protected]