Go modules · proxy.golang.org

gitlab.com/redhat/hummingbird/containers

DNS / OAST exfiltration: matched "DiG ${version//\\~/-}\"\n result=$("

Why PkgRadar flagged v0.0.0-20260531035056-988b00f4ec10

Severity	Signal	Evidence
high	DNS / OAST exfiltration	matched "DiG ${version//\\~/-}\"\n result=$(" · gitlab.com/redhat/hummingbird/[email protected]/images/dig/tests-container.yml

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260531035056-988b00f4ec10`	High risk	30	2026-06-01

Block this in CI

PkgRadar gates gitlab.com/redhat/hummingbird/containers (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gitlab.com/redhat/hummingbird/[email protected]