azd-deployment

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill's Bicep modules set containerImage to the remote image URL https://mcr.microsoft.com/azuredocs/containerapps-helloworld:latest which will be pulled and executed at deployment/runtime (remote code execution) and is used as the deployed service image in the templates.