github-actions-pnpm-ci

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The workflows use external GitHub Actions that are fetched and executed at runtime—pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093, actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e, and actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd—which are remote code dependencies controlling execution.