Info: Possibly incomplete results: error parsing shell code: (( can only be used to open an arithmetic cmd: Dockerfile.windows:15-17
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/changelog.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/changelog.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/changelog.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/changelog.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-build.yaml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/ci-build.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-reviewer.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/dependabot-reviewer.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gh-pages.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/gh-pages.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gh-pages.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/gh-pages.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gh-pages.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/gh-pages.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gh-pages.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/gh-pages.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gh-pages.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/gh-pages.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/gh-pages.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/gh-pages.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:309: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:315: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:348: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:352: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:355: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:359: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:363: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:411: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdks.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/sdks.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snyk.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/snyk.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snyk.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/snyk.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snyk.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/snyk.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snyk.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/alexec/argo-workflows/snyk.yml/master?enable=pin
Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/universal to mcr.microsoft.com/vscode/devcontainers/universal@sha256:8b30c9dcb2e9e39ec850171def409cfb34ef0c951ba7b6fe3e9996518642903d
Warn: containerImage not pinned by hash: Dockerfile:3
Warn: containerImage not pinned by hash: Dockerfile:24
Warn: containerImage not pinned by hash: Dockerfile:43
Warn: containerImage not pinned by hash: Dockerfile:54
Warn: containerImage not pinned by hash: Dockerfile:65
Warn: containerImage not pinned by hash: Dockerfile:79
Warn: containerImage not pinned by hash: Dockerfile:90
Warn: containerImage not pinned by hash: Dockerfile:104
Warn: containerImage not pinned by hash: Dockerfile.windows:10
Warn: containerImage not pinned by hash: Dockerfile.windows:28
Warn: containerImage not pinned by hash: Dockerfile.windows:40
Warn: containerImage not pinned by hash: Dockerfile.windows:53
Warn: containerImage not pinned by hash: test/e2e/images/argosay/v1/Dockerfile:1: pin your Docker image by updating ubuntu:14.04 to ubuntu:14.04@sha256:64483f3496c1373bfd55348e88694d1c4d0c9b660dee6bfef5e12f43b9933b30
Warn: containerImage not pinned by hash: test/e2e/images/argosay/v2/Dockerfile:1: pin your Docker image by updating argoproj/argosay:v1 to argoproj/argosay:v1@sha256:84b61a51bada3b2173d64668c481db2456cad92e9c2561f516aed0f59ad68e99
Warn: chocoCommand not pinned by hash: Dockerfile.windows:21-22
Warn: chocoCommand not pinned by hash: Dockerfile.windows:21-22
Warn: downloadThenRun not pinned by hash: .devcontainer/pre-build.sh:5
Warn: downloadThenRun not pinned by hash: .devcontainer/pre-build.sh:10
Warn: downloadThenRun not pinned by hash: .github/workflows/ci-build.yaml:33
Warn: downloadThenRun not pinned by hash: .github/workflows/ci-build.yaml:120
Info: 0 out of 36 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 26 third-party GitHubAction dependencies pinned
Info: 0 out of 4 downloadThenRun dependencies pinned
Info: 2 out of 2 goCommand dependencies pinned
Info: 0 out of 15 containerImage dependencies pinned
Info: 0 out of 2 chocoCommand dependencies pinned