Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:308: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:357: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:477: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:486: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:504: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:530: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:539: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:571: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:573: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:577: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:590: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:596: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:609: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:615: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:643: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:258: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:371: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:394: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:409: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:433: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:456: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/cmake.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/pypi.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/pypi.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/pypi.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_rust.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/thrift/release_rust.yml/master?enable=pin
Warn: containerImage not pinned by hash: build/docker/msvc2017/Dockerfile:16
Warn: containerImage not pinned by hash: build/docker/ubuntu-focal/Dockerfile:18: pin your Docker image by updating buildpack-deps:focal-scm to buildpack-deps:focal-scm@sha256:fa56fe73b4475655b2f39d6376b6a6664d24b5c43227f709d4a923609f3286a1
Warn: containerImage not pinned by hash: build/docker/ubuntu-jammy/Dockerfile:18: pin your Docker image by updating buildpack-deps:jammy-scm to buildpack-deps:jammy-scm@sha256:c8be5056e8b53d44d44a776bbd0489067535324932fc4344bd046ff1773cb71a
Warn: containerImage not pinned by hash: build/docker/ubuntu-noble/Dockerfile:18: pin your Docker image by updating buildpack-deps:noble-scm to buildpack-deps:noble-scm@sha256:d4718da465064c99294ce629318c18fcc8d97a87dcceadd4c04255dd352a2c76
Warn: chocoCommand not pinned by hash: build/docker/msvc2017/Dockerfile:51
Warn: chocoCommand not pinned by hash: build/docker/msvc2017/Dockerfile:54
Warn: chocoCommand not pinned by hash: build/docker/msvc2017/Dockerfile:84
Warn: chocoCommand not pinned by hash: build/docker/msvc2017/Dockerfile:87
Warn: downloadThenRun not pinned by hash: build/docker/ubuntu-focal/Dockerfile:276-277
Warn: pipCommand not pinned by hash: build/docker/ubuntu-focal/Dockerfile:304-308
Warn: downloadThenRun not pinned by hash: build/docker/ubuntu-jammy/Dockerfile:269-270
Warn: pipCommand not pinned by hash: build/docker/ubuntu-jammy/Dockerfile:297-301
Warn: downloadThenRun not pinned by hash: build/docker/ubuntu-noble/Dockerfile:268-269
Warn: goCommand not pinned by hash: test/go/genmock.sh:7
Warn: pipCommand not pinned by hash: .github/workflows/build.yml:492
Warn: downloadThenRun not pinned by hash: .github/workflows/build.yml:418
Info: 0 out of 40 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 2 third-party GitHubAction dependencies pinned
Info: 0 out of 4 containerImage dependencies pinned
Info: 0 out of 4 chocoCommand dependencies pinned
Info: 0 out of 4 downloadThenRun dependencies pinned
Info: 0 out of 3 pipCommand dependencies pinned
Info: 0 out of 1 goCommand dependencies pinned