Info: Possibly incomplete results: error parsing shell code: not a valid arithmetic operator: describe: tools/image-tag:0
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/backport.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/bizy01/loki/backport.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/metrics-collector.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/bizy01/loki/metrics-collector.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/bizy01/loki/publish.yml/main?enable=pin
Warn: containerImage not pinned by hash: clients/cmd/docker-driver/Dockerfile:7
Warn: containerImage not pinned by hash: clients/cmd/docker-driver/Dockerfile:12: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: clients/cmd/fluent-bit/Dockerfile:1
Warn: containerImage not pinned by hash: clients/cmd/fluent-bit/Dockerfile:6: pin your Docker image by updating fluent/fluent-bit:1.8 to fluent/fluent-bit:1.8@sha256:cc8dbcdc074dabbd9af913be0ba78bdaa7186bf7e5e91b7b62d7195e09e6245b
Warn: containerImage not pinned by hash: clients/cmd/fluentd/Dockerfile:1
Warn: containerImage not pinned by hash: clients/cmd/fluentd/Dockerfile:12: pin your Docker image by updating fluent/fluentd:v1.9.2-debian-1.0 to fluent/fluentd:v1.9.2-debian-1.0@sha256:87514a7b2afe282c4a323bdb9fbadf894290b8e9665b1c9d48f5c1c879bf9db4
Warn: containerImage not pinned by hash: clients/cmd/logstash/Dockerfile:1: pin your Docker image by updating logstash:7.9.3 to logstash:7.9.3@sha256:5ff755309d0e4bec806f7dfb3a9855dbcabdb5a51f4dc98038c666d3f32ffddd
Warn: containerImage not pinned by hash: clients/cmd/promtail/Dockerfile:1
Warn: containerImage not pinned by hash: clients/cmd/promtail/Dockerfile:13: pin your Docker image by updating debian:buster-slim to debian:buster-slim@sha256:bb3dc79fddbca7e8903248ab916bb775c96ec61014b3d02b4f06043b604726dc
Warn: containerImage not pinned by hash: clients/cmd/promtail/Dockerfile.arm32:1
Warn: containerImage not pinned by hash: clients/cmd/promtail/Dockerfile.arm32:11: pin your Docker image by updating debian:stretch-slim to debian:stretch-slim@sha256:abaa313c7e1dfe16069a1a42fa254014780f165d4fd084844602edbe29915e70
Warn: containerImage not pinned by hash: clients/cmd/promtail/Dockerfile.cross:5
Warn: containerImage not pinned by hash: clients/cmd/promtail/Dockerfile.cross:9
Warn: containerImage not pinned by hash: clients/cmd/promtail/Dockerfile.cross:16: pin your Docker image by updating debian:stretch-slim to debian:stretch-slim@sha256:abaa313c7e1dfe16069a1a42fa254014780f165d4fd084844602edbe29915e70
Warn: containerImage not pinned by hash: clients/cmd/promtail/Dockerfile.debug:5
Warn: containerImage not pinned by hash: clients/cmd/promtail/Dockerfile.debug:12: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: cmd/logcli/Dockerfile:1
Warn: containerImage not pinned by hash: cmd/logcli/Dockerfile:8: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: cmd/loki-canary/Dockerfile:1
Warn: containerImage not pinned by hash: cmd/loki-canary/Dockerfile:9: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: cmd/loki-canary/Dockerfile.cross:5
Warn: containerImage not pinned by hash: cmd/loki-canary/Dockerfile.cross:9
Warn: containerImage not pinned by hash: cmd/loki-canary/Dockerfile.cross:15: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: cmd/loki/Dockerfile:1
Warn: containerImage not pinned by hash: cmd/loki/Dockerfile:9: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: cmd/loki/Dockerfile.cross:5
Warn: containerImage not pinned by hash: cmd/loki/Dockerfile.cross:9
Warn: containerImage not pinned by hash: cmd/loki/Dockerfile.cross:15: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: cmd/loki/Dockerfile.debug:5
Warn: containerImage not pinned by hash: cmd/loki/Dockerfile.debug:11: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: cmd/migrate/Dockerfile:1
Warn: containerImage not pinned by hash: cmd/migrate/Dockerfile:6: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: cmd/querytee/Dockerfile:1
Warn: containerImage not pinned by hash: cmd/querytee/Dockerfile:8: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: cmd/querytee/Dockerfile.cross:5
Warn: containerImage not pinned by hash: cmd/querytee/Dockerfile.cross:9
Warn: containerImage not pinned by hash: cmd/querytee/Dockerfile.cross:15: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: containerImage not pinned by hash: loki-build-image/Dockerfile:1
Warn: containerImage not pinned by hash: loki-build-image/Dockerfile:10
Warn: containerImage not pinned by hash: loki-build-image/Dockerfile:18
Warn: containerImage not pinned by hash: loki-build-image/Dockerfile:23
Warn: containerImage not pinned by hash: loki-build-image/Dockerfile:29
Warn: containerImage not pinned by hash: loki-build-image/Dockerfile:37
Warn: containerImage not pinned by hash: loki-build-image/Dockerfile:42
Warn: containerImage not pinned by hash: loki-build-image/Dockerfile:45: pin your Docker image by updating golang:1.16.6-buster to golang:1.16.6-buster@sha256:f3923dc5a92a237db0f07a924a238a8a4a711e3b77a7b5bdb1b526e107dcb9d4
Warn: containerImage not pinned by hash: tools/bigtable-backup/Dockerfile:1: pin your Docker image by updating grafana/bigtable-backup:master-18e7589 to grafana/bigtable-backup:master-18e7589@sha256:7ad47b8cfcf48bb9a56903745d56fa22c2ee0a0f8005b1a6d50fe4da036dda5d
Warn: containerImage not pinned by hash: tools/dev/loki-boltdb-storage-s3/dev.dockerfile:1: pin your Docker image by updating golang:1.16 to golang:1.16@sha256:5f6a4662de3efc6d6bb812d02e9de3d8698eea16b8eb7281f03e6f3e8383018e
Warn: containerImage not pinned by hash: tools/dev/loki-boltdb-storage-s3/dev.dockerfile:5: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: downloadThenRun not pinned by hash: loki-build-image/Dockerfile:19-21
Warn: goCommand not pinned by hash: loki-build-image/Dockerfile:43
Warn: pipCommand not pinned by hash: tools/bigtable-backup/Dockerfile:2-3
Warn: pipCommand not pinned by hash: tools/bigtable-backup/Dockerfile:6
Warn: goCommand not pinned by hash: tools/dev/loki-boltdb-storage-s3/dev.dockerfile:3
Warn: pipCommand not pinned by hash: vendor/github.com/gocql/gocql/install_test_deps.sh:6
Warn: goCommand not pinned by hash: vendor/github.com/json-iterator/go/build.sh:10
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/regenerate.sh:35
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/vet.sh:37
Warn: npmCommand not pinned by hash: .github/workflows/backport.yml:20
Warn: npmCommand not pinned by hash: .github/workflows/metrics-collector.yml:18
Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 10 out of 15 goCommand dependencies pinned
Info: 0 out of 3 pipCommand dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned
Info: 0 out of 48 containerImage dependencies pinned