ci-cd-pipelines

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The workflow templates invoke external GitHub Actions (e.g., https://github.com/actions/checkout, https://github.com/pnpm/action-setup, https://github.com/docker/build-push-action, https://github.com/game-ci/unity-test-runner, https://github.com/golangci/golangci-lint-action, https://github.com/changesets/action) and also run commands that pull and execute remote modules (e.g., go install golang.org/x/vuln/cmd/govulncheck@latest), which are fetched at runtime and execute remote code as required dependencies for the pipelines.