database-migration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The GitHub Actions workflow downloads and extracts remote executable code via wget from https://repo1.maven.org/maven2/org/flywaydb/flyway-commandline/10.0.0/flyway-commandline-10.0.0-linux-x64.tar.gz and then runs it in the CI job (so the URL is fetched at runtime and the fetched content is executed), which is a required dependency for validation.