ci-cd

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The GitHub Actions workflow runs curl -L "https://packages.cloudfoundry.org/stable?release=linux64-binary&version=v8" | tar -zx which fetches and installs a remote CF CLI binary at runtime, thereby executing remote code from https://packages.cloudfoundry.org/stable?release=linux64-binary&version=v8.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The workflow includes a step that downloads a binary and runs "sudo mv cf8 /usr/local/bin/cf", which instructs a privileged modification of the runner's system files (use of sudo to alter /usr/local/bin).