github-actions-templates

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The workflow templates reference third‑party GitHub Actions that are fetched and executed at workflow runtime (e.g., github.com/aquasecurity/trivy-action@master and github.com/snyk/actions/node@master), so remote repository content will be run as code and thus represents a runtime external dependency.