gitlab-ci

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The GitLab CI config uses a remote include fetched at runtime from https://gitlab.com/my-group/ci-templates/-/raw/main/node.yml, which is incorporated into the pipeline and can directly control job definitions and execution, making it a required runtime external dependency.