PkgRadar

PyPI · pypi.org

dagster-ssh

Credential file access: matched ".ssh/"

Why PkgRadar flagged 0.29.9

SeveritySignalEvidence
mediumCredential file accessmatched ".ssh/" · dagster_ssh-0.29.9/dagster_ssh/resources.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.29.9Review32026-06-11
0.29.8Review32026-06-04
0.29.7Review32026-05-28

Block this in CI

PkgRadar gates dagster-ssh (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi dagster-ssh==0.29.9
dagster-ssh — PyPI security scan | PkgRadar