# AUTO_UPDATE_BEHAVIOR

Severity: medium

## What It Detects

Configuration or scripts suggesting automatic update behavior.

## Why It Matters

Auto-update can change trusted code after the initial review.

## False Positive Notes

Some update checks are passive and do not install anything.

## Recommended Action

Prefer pinned versions or explicit update approval.