loom-ci-cd

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflows include GitHub Action "uses" references that are fetched and executed at runtime (for example, uses: actions/checkout@v4 → https://github.com/actions/checkout), meaning remote repository code is pulled and run as required pipeline steps.