jenkins

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The Jenkins pipelines perform runtime SCM operations (checkout scm, @Library('my-shared-library') and git commands) that fetch and execute pipeline code from a remote repository (e.g., https://github.com/repo.git), so external repo content can directly execute code in the agent.