playwright-ops

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The CI workflow includes external runtime dependencies that will be fetched and executed during runs — e.g. GitHub Action references like actions/checkout@v5, actions/setup-node@v5, actions/upload-artifact@v4 (and actions/download-artifact@v4) and the container image mcr.microsoft.com/playwright:v1.52.0-jammy — which are pulled at runtime and execute remote code.