PkgRadar

Go modules · proxy.golang.org

mygithub.libinneed.workers.dev/grafana/pyroscope

Remote Payload: matched "curl "

Why PkgRadar flagged v1.20.4

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · mygithub.libinneed.workers.dev/grafana/[email protected]/cmd/profilecli/kube_proxy.go
mediumRemote Payloadmatched "github.com/grafana/profiles-drilldown/releases/download" · mygithub.libinneed.workers.dev/grafana/[email protected]/pkg/embedded/grafana/grafana.go
mediumRemote Payloadmatched "Curl " · mygithub.libinneed.workers.dev/grafana/[email protected]/tools/api-docs-generator/curl.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/grafana/[email protected]/tools/api-docs-generator/main.go
mediumRemote Payloadmatched "github.com/grafana/pyroscope-dotnet/releases/download" · mygithub.libinneed.workers.dev/grafana/[email protected]/tools/update_examples.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.20.4High risk652026-06-13
v1.20.2High risk652026-06-13

Block this in CI

PkgRadar gates mygithub.libinneed.workers.dev/grafana/pyroscope (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go mygithub.libinneed.workers.dev/grafana/[email protected]
mygithub.libinneed.workers.dev/grafana/pyroscope — Go modules security scan | PkgRadar