testing

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill starts Testcontainers using Docker images hosted on ghcr.io (e.g. ghcr.io/navikt/melosys-legacy-avhengigheter/oracle-xe:18.4.0-slim and the ORACLE_IMAGE ghcr.io/navikt/melosys-legacy-avhengigheter/oracle-arm:19.3.0-ee-slim-faststart), which are pulled at test runtime and will execute remote code as required dependencies (the doc even shows logging into ghcr.io), so this is a runtime external dependency that can execute remote code.