PkgRadar

PyPI · pypi.org

shub-workflow

Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"

Why PkgRadar flagged 1.14.34

SeveritySignalEvidence
mediumCredential file accessmatched "GOOGLE_APPLICATION_CREDENTIALS" · shub_workflow-1.14.34/shub_workflow/utils/gcstorage.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.14.34Review62026-05-28
1.14.33.1Review62026-05-28
1.14.33Review62026-05-28

Block this in CI

PkgRadar gates shub-workflow (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi shub-workflow==1.14.34
Start free — 25 scans / moView full evidence