konflux-tekton-updates

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflow explicitly instructs the agent/operator to fetch live migration docs at runtime (e.g. "Fetch raw MIGRATION.md" and the template raw URL https://raw.githubusercontent.com///main/ and the example https://github.com/konflux-ci/build-pipeline-tasks/blob/main/task/buildah-oci-ta/MIGRATION.md), so remote content is fetched and directly controls what edits/actions are performed.