dotnet-gha-build-test

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This workflow references and runs external GitHub Actions at runtime (e.g., uses: actions/setup-dotnet@v4, dorny/test-reporter@v1, codecov/codecov-action@v4), which are fetched from GitHub and execute remote code as required dependencies (flagged: actions/setup-dotnet@v4).