PkgRadar

Go modules · proxy.golang.org

gitlab.com/gitlab-org/cluster-integration/gitlab-agent/v19

Tls Verification Disabled, Go Mod Replace Local

Why PkgRadar flagged v19.2.0-rc1.0.20260624005801-32de75383c24

SeveritySignalEvidence
mediumTls Verification Disabledgitlab.com/gitlab-org/cluster-integration/gitlab-agent/[email protected]/internal/module/kubernetes_api/server/graph_api.go
mediumTls Verification Disabledgitlab.com/gitlab-org/cluster-integration/gitlab-agent/[email protected]/internal/module/kubernetes_api/server/watch_aggregator/websocket.go
mediumGo Mod Replace Localgitlab.com/gitlab-org/cluster-integration/gitlab-agent/[email protected]/go.mod

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v19.2.0-rc1.0.20260624005801-32de75383c24Review342026-06-25
v19.0.3Review242026-06-25
v19.1.1Review242026-06-25
v19.2.0-rc1.0.20260617110657-e0cfb4ebfcc7Low risk02026-06-18
v19.1.0-rc43Low risk02026-06-18
v19.2.0-rc1Low risk02026-06-18
v19.1.0Low risk02026-06-18
v19.1.0-rc3.0.20260616132019-dec4c9080aceLow risk02026-06-17
v19.1.0-rc42Low risk02026-06-17
v19.1.0-rc3Low risk02026-06-11
v19.0.2Low risk02026-06-11

Block this in CI

PkgRadar gates gitlab.com/gitlab-org/cluster-integration/gitlab-agent/v19 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gitlab.com/gitlab-org/cluster-integration/gitlab-agent/[email protected]