PkgRadar

Go modules · proxy.golang.org

github.com/spiffe/sri

Credential file access: matched "AWS_ACCESS_KEY"

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.2.1-0.20260610202836-4542f813a6a4Review152026-06-12
v1.14.7Review152026-06-12
v1.15.1Review152026-06-12

Block this in CI

PkgRadar gates github.com/spiffe/sri (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/spiffe/[email protected]
Start free — 25 scans / moView full evidence