ci-cd

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The CI example includes GitHub Actions references (e.g., actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 and aws-actions/configure-aws-credentials@v4) which are fetched at runtime by the pipeline and execute remote code, so they are runtime external dependencies that can run code.