terraform-ops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is the GitHub Actions template that reads plan.txt (generated from terraform plan output) and posts it into a PR comment via actions/github-script, so any free-form text that ends up in plan.txt (including from outsider-authored Terraform code in the PR) is ingested into the agent/LLM context through the PR comment body.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The GitHub Actions workflow fetches and executes external action code at runtime via uses: refs (e.g., actions/checkout@v5, hashicorp/setup-terraform@v3, aquasecurity/trivy-action@v0.33.1), so these owner/repo@ref references are runtime external dependencies that execute remote code.