dotnet-devops

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill includes GitHub Actions that are fetched and executed at workflow runtime (e.g., actions/setup-dotnet — https://github.com/actions/setup-dotnet), which is a required runtime dependency that pulls and runs remote code in CI runners.