ci-workflow-sync

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflow contains a runtime curl that downloads and extracts a MongoDB binary from https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-ubuntu2204-${MONGODB_VERSION}.tgz which is then used/executed by tests, so this is a runtime external dependency that fetches and executes remote code.