PkgRadar

Go modules · proxy.golang.org

mygithub.libinneed.workers.dev/openshift/origin

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v1.2.0-rc1

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · mygithub.libinneed.workers.dev/openshift/[email protected]/Godeps/_workspace/src/github.com/ugorji/go/codec/prebuild.go
mediumRemote Payloadmatched "cUrl\n\t\t\t\t\t" · mygithub.libinneed.workers.dev/openshift/[email protected]/Godeps/_workspace/src/github.com/ncw/swift/auth.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/openshift/[email protected]/Godeps/_workspace/src/github.com/rackspace/gophercloud/openstack/identity/v2/tokens/results.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/openshift/[email protected]/Godeps/_workspace/src/golang.org/x/net/html/charset/gen.go
mediumRemote Payloadmatched "curl " · mygithub.libinneed.workers.dev/openshift/[email protected]/Godeps/_workspace/src/golang.org/x/net/http2/h2demo/launch.go
mediumRemote Payloadmatched "curl " · mygithub.libinneed.workers.dev/openshift/[email protected]/Godeps/_workspace/src/k8s.io/kubernetes/pkg/kubectl/cmd/proxy.go
mediumRemote Payloadmatched "curl " · mygithub.libinneed.workers.dev/openshift/[email protected]/pkg/auth/server/tokenrequest/endpoints.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/openshift/[email protected]/pkg/cmd/server/api/v1/swagger_doc.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/openshift/[email protected]/pkg/cmd/server/api/validation/master.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/openshift/[email protected]/pkg/cmd/server/origin/auth.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/openshift/[email protected]/pkg/cmd/server/origin/handlers.go
mediumRemote Payloadmatched "curl " · mygithub.libinneed.workers.dev/openshift/[email protected]/pkg/diagnostics/systemd/systemd.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.2.0-rc1High risk1452026-06-12
v1.5.0-alpha.0High risk962026-06-12

Block this in CI

PkgRadar gates mygithub.libinneed.workers.dev/openshift/origin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go mygithub.libinneed.workers.dev/openshift/[email protected]