Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-labels-for-pr.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/add-labels-for-pr.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/add-labels-for-pr.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/add-labels-for-pr.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-publish-to-oss.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-oss.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-publish-to-oss.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-oss.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-publish-to-oss.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-oss.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-publish-to-oss.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-oss.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-publish-to-oss.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-oss.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-publish-to-oss.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-oss.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-publish-to-r2.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-r2.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-publish-to-r2.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-r2.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-publish-to-r2.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-r2.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-publish-to-r2.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-r2.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-publish-to-r2.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-r2.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-publish-to-r2.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/build-publish-to-r2.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-translator.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/issue-translator.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/llm-code-review.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/llm-code-review.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonarcloud-scan.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/sonarcloud-scan.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sonarcloud-scan.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/sonarcloud-scan.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync2gitee.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/sync2gitee.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tyops-check.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/tyops-check.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tyops-check.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/1Panel-dev/1Panel/tyops-check.yml/dev?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/build-publish-to-oss.yml:18
Warn: npmCommand not pinned by hash: .github/workflows/build-publish-to-r2.yml:18
Info: 0 out of 9 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 12 third-party GitHubAction dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned