cicd-workflows

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The GitHub Actions workflows repeatedly run curl -fsSL https://raw.githubusercontent.com/databricks/setup-cli/main/install.sh | sh at runtime to fetch and execute a remote install script for the Databricks CLI, which executes remote code and is required by the deployment/validation steps.