Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/deploy.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/deploy.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/deploy.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/deploy.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/deploy.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/real-device.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/real-device.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/real-device.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/real-device.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/real-device.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/real-device.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/real-device.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/real-device.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/real-device.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/real-device.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/real-device.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/real-device.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/real-device.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/real-device.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/real-device.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/real-device.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/danielpaulus/go-ios/test.yml/main?enable=pin
Warn: containerImage not pinned by hash: usbmuxdbuild/Dockerfile:1: pin your Docker image by updating ubuntu:latest to ubuntu:latest@sha256:1e622c5f073b4f6bfad6632f2616c7f59ef256e96fe78bf6a595d1dc4376ac02
Warn: goCommand not pinned by hash: .github/workflows/deploy.yml:38
Warn: npmCommand not pinned by hash: .github/workflows/release.yml:160
Info: 0 out of 25 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 0 out of 1 goCommand dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned