PkgRadar

Go modules · proxy.golang.org

go.woodpecker-ci.org/woodpecker/v3

Shell Credential File Read, Remote Payload, Tls Verification Disabled +2 more

Why PkgRadar flagged v3.16.0

SeveritySignalEvidence
highShell Credential File Read—
mediumRemote Payload—
mediumTls Verification Disabled—
mediumTls Verification Disabled—
mediumTls Verification Disabled—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.16.0High risk962026-06-28

Block this in CI

PkgRadar gates go.woodpecker-ci.org/woodpecker/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go go.woodpecker-ci.org/woodpecker/[email protected]
Start free — 25 scans / moView full evidence
go.woodpecker-ci.org/woodpecker/v3 — Go modules security scan | PkgRadar