PkgRadar

Go modules · proxy.golang.org

go.podman.io/buildah

Tls Verification Disabled, Go Cgo Preamble

Why PkgRadar flagged v1.44.1-0.20260708142726-7c90b93668e1

SeveritySignalEvidence
mediumTls Verification Disabled

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.44.1-0.20260708142726-7c90b93668e1Review122026-07-09
v1.44.1-0.20260622140542-9ce0fe118216Review122026-07-09
v1.44.1-0.20260707192751-d1bb55d0dafdReview122026-07-08
v1.44.1-0.20260623223152-656771c97787Review122026-07-08
v1.44.1-0.20260608174828-0320f1629aa6Low risk02026-06-09
v1.43.2Low risk02026-06-09

Block this in CI

PkgRadar gates go.podman.io/buildah (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go go.podman.io/[email protected]
go.podman.io/buildah — Go modules security scan | PkgRadar