PkgRadar

Go modules · proxy.golang.org

mygithub.libinneed.workers.dev/container-registry/harbor-satellite

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.4-0.20260605011842-bcc9133c3ca3

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/container-registry/[email protected]/internal/state/reporting_process.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/container-registry/[email protected]/internal/state/spiffe_registration.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/container-registry/[email protected]/internal/state/state_process.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.4-0.20260605011842-bcc9133c3ca3High risk362026-06-09
v0.0.1Review122026-06-09
v0.0.2High risk362026-06-09
v0.0.3High risk362026-06-09

Block this in CI

PkgRadar gates mygithub.libinneed.workers.dev/container-registry/harbor-satellite (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go mygithub.libinneed.workers.dev/container-registry/[email protected]
Start free — 25 scans / moView full evidence
mygithub.libinneed.workers.dev/container-registry/harbor-satellite — Go modules security scan | PkgRadar