Go modules · proxy.golang.org

gitlab.com/gitlab-org/cluster-integration/gitlab-agent/v18

Remote Payload: matched "cUrl "

Why PkgRadar flagged v18.10.8

Severity	Signal	Evidence
medium	Remote Payload	matched "cUrl " · gitlab.com/gitlab-org/cluster-integration/gitlab-agent/[email protected]/pkg/kascfg/kascfg.pb.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v18.10.8`	Review	12	2026-06-14
`v18.11.5`	Low risk	0	2026-06-11

Block this in CI

PkgRadar gates gitlab.com/gitlab-org/cluster-integration/gitlab-agent/v18 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gitlab.com/gitlab-org/cluster-integration/gitlab-agent/[email protected]