Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-certificates.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-certificates.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-certificates.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-certificates.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-easyjson.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-easyjson.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-easyjson.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-easyjson.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-easyjson.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-easyjson.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-dependencies-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-dependencies-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-dependencies-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-dependencies-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-dependencies-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-dependencies-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-dependencies-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-dependencies-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-dependencies-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:244: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-task.yml:247: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-i18n-task.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-i18n-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-i18n-task.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-i18n-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-i18n-task.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-i18n-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-license.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-license.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-license.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-license.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-markdown-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-markdown-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-markdown-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-markdown-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-markdown-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-markdown-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-markdown-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-markdown-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-markdown-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-mkdocs-task.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-mkdocs-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-mkdocs-task.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-mkdocs-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-mkdocs-task.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-mkdocs-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-mkdocs-task.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-mkdocs-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-mkdocs-task.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-mkdocs-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-prettier-formatting-task.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-prettier-formatting-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-prettier-formatting-task.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-prettier-formatting-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-protobuf-task.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-protobuf-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-protobuf-task.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-protobuf-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-protobuf-task.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-protobuf-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-protobuf-task.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-protobuf-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-protobuf-task.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/check-protobuf-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/deploy-cobra-mkdocs-versioned-poetry.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/deploy-cobra-mkdocs-versioned-poetry.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/deploy-cobra-mkdocs-versioned-poetry.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/deploy-cobra-mkdocs-versioned-poetry.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/deploy-cobra-mkdocs-versioned-poetry.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/i18n-nightly-push.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/i18n-nightly-push.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/i18n-nightly-push.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/i18n-nightly-push.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/i18n-nightly-push.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/i18n-nightly-push.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/i18n-weekly-pull.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/i18n-weekly-pull.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/i18n-weekly-pull.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/i18n-weekly-pull.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/i18n-weekly-pull.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/i18n-weekly-pull.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/i18n-weekly-pull.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/i18n-weekly-pull.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:256: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:269: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:301: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-nightly-task.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-nightly-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-tester-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-tester-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-tester-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-tester-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-tester-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/publish-go-tester-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:241: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:262: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:265: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:272: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:315: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-task.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/release-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/sync-labels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/sync-labels.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/sync-labels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/sync-labels.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/sync-labels.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/sync-labels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/sync-labels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-cli/test-go-task.yml/master?enable=pin
Warn: containerImage not pinned by hash: debian/Dockerfile:1
Warn: pipCommand not pinned by hash: .github/workflows/check-mkdocs-task.yml:58
Warn: pipCommand not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:78
Warn: pipCommand not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:79
Warn: npmCommand not pinned by hash: .github/workflows/sync-labels.yml:131
Warn: npmCommand not pinned by hash: .github/workflows/sync-labels.yml:41
Warn: goCommand not pinned by hash: .github/workflows/test-go-task.yml:183
Info: 0 out of 78 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 52 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 3 out of 4 goCommand dependencies pinned
Info: 0 out of 3 pipCommand dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned