PkgRadar

Go modules · proxy.golang.org

k8c.io/kubermatic/v2

Remote Payload: matched "github.com/containernetworking/plugins/releases/download"

Why PkgRadar flagged v2.30.1-0.20260612123457-66a6a5b90529

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/containernetworking/plugins/releases/download" · k8c.io/kubermatic/[email protected]/cmd/kubermatic-installer/cmd_mirror_binaries.go
mediumRemote Payloadmatched "cURL " · k8c.io/kubermatic/[email protected]/pkg/controller/user-cluster-controller-manager/resources/resources/operating-system-manager/webhook.go
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · k8c.io/kubermatic/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.30.1-0.20260612123457-66a6a5b90529Review832026-06-13
v2.30.1-0.20260612095158-5ebc6b65f4e4Review832026-06-13
v2.30.1-0.20260604154235-752e9d10262bReview832026-06-11
v2.30.1-0.20260603151736-f5a776bfd2c2Review832026-06-11
v2.16.0-beta.1.0.20210226174614-ee44723b2921Review532026-06-11
v2.30.1-0.20260609162731-7680620f30b2Review832026-06-10
v2.30.1-0.20260609104030-04206fa97f36Review832026-06-10
v2.30.1-0.20260608110229-1b9f7dc6ef67Review832026-06-09
v2.30.1-0.20260608073029-0cc27dab2d29Review832026-06-09
v2.30.1-0.20260604201235-b2c74a27a74dReview832026-06-09
v2.30.1-0.20260605085735-2e634b0e6fe4Review832026-06-06
v2.30.1-0.20260604030233-047d9eccd483Review832026-06-05
v2.30.1-0.20260602153834-893dd0ff7d89Review832026-06-03
v2.30.1-0.20260602125732-fd03c58c1ef1Review832026-06-03
v2.29.8Review832026-06-01
v2.30.1-0.20260529142929-383b0b0dd72bReview832026-06-01
v2.28.11Review832026-05-30

Block this in CI

PkgRadar gates k8c.io/kubermatic/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go k8c.io/kubermatic/[email protected]
Start free — 25 scans / moView full evidence