game-ci-pipeline

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The workflows download and execute remote code at runtime (for example: curl -L -o butler.zip https://broth.itch.ovh/butler/linux-amd64/LATEST/archive/default to fetch and run butler), and rely on remote container images/actions that run code (e.g., barichello/godot-ci:4.4, game-ci/unity-builder@v4, game-ci/steam-deploy@v3), so these URLs/repos are runtime dependencies that execute fetched code.