docker-scout

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The GitHub Actions used in the CI examples fetch and run remote action code at workflow runtime (e.g., uses: docker/scout-action@v1 -> https://github.com/docker/scout-action and uses: docker/build-push-action@v6 -> https://github.com/docker/build-push-action), so these are runtime external dependencies that execute remote code.