PkgRadar

Go modules · proxy.golang.org

github.tiyicn.workers.dev/kubernetes/test-infra

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260609141750-78683f1faa7d

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.tiyicn.workers.dev/kubernetes/[email protected]/experiment/coverage/apicoverage.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.tiyicn.workers.dev/kubernetes/[email protected]/kubetest/aks.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.tiyicn.workers.dev/kubernetes/[email protected]/kubetest/aksengine.go
mediumRemote Payloadmatched "github.com/kubernetes-sigs/kind/releases/download" · github.tiyicn.workers.dev/kubernetes/[email protected]/kubetest/kind/kind.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.tiyicn.workers.dev/kubernetes/[email protected]/releng/prepare-release-branch/internal/run/run.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260609141750-78683f1faa7dHigh risk1602026-06-11

Block this in CI

PkgRadar gates github.tiyicn.workers.dev/kubernetes/test-infra (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.tiyicn.workers.dev/kubernetes/[email protected]