vercel-preview-cleanup
Warn
Audited by Snyk on Aug 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The caller workflow uses a remote reusable workflow via "uses: YOUR-ORG/.github/.github/workflows/reusable-vercel-preview-cleanup.yml@REPLACE-WITH-FULL-COMMIT-SHA", which GitHub Actions fetches at runtime and executes as code, making it a required runtime external dependency that executes remote code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata