PkgRadar

Go modules · proxy.golang.org

github.tiyicn.workers.dev/jenkins-x-plugins/jx-pipeline

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.38

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.tiyicn.workers.dev/jenkins-x-plugins/[email protected]/pkg/tektonlog/git_endpoint.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.22Low risk02026-06-12
v0.0.38Review302026-06-12
v0.0.18Low risk02026-06-12

Block this in CI

PkgRadar gates github.tiyicn.workers.dev/jenkins-x-plugins/jx-pipeline (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.tiyicn.workers.dev/jenkins-x-plugins/[email protected]