Go modules · proxy.golang.org
github.tiyicn.workers.dev/l3montree-dev/devguard
Remote Payload: matched "raw.githubusercontent.com"
Why PkgRadar flagged v1.5.2-0.20260611112015-568621a3f290
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.tiyicn.workers.dev/l3montree-dev/[email protected]/cmd/devguard-cli/commands/licenses.go |
| medium | Remote Payload | matched "curl " · github.tiyicn.workers.dev/l3montree-dev/[email protected]/cmd/devguard-scanner/commands/curl.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.tiyicn.workers.dev/l3montree-dev/[email protected]/cmd/devguard-scanner/commands/kyverno2sarif.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.tiyicn.workers.dev/l3montree-dev/[email protected]/controllers/first_party_vuln_controller.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.tiyicn.workers.dev/l3montree-dev/[email protected]/controllers/scan_controller.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.5.2-0.20260611112015-568621a3f290 | High risk | 63 | 2026-06-15 |
v1.4.0 | High risk | 51 | 2026-06-15 |
v1.4.0-rc.1 | High risk | 51 | 2026-06-15 |
v1.4.2 | High risk | 51 | 2026-06-15 |
v1.5.0 | High risk | 51 | 2026-06-15 |
Block this in CI
pkgradar gate --ecosystem go github.tiyicn.workers.dev/l3montree-dev/[email protected]