building-devsecops-pipeline-with-gitlab-ci

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow queries GitLab API endpoints (groups, projects, vulnerabilities, pipelines) using Python scripts, which ingest outsider-submitted merge requests, issues, or commit metadata that can contain untrusted free text.