Warn: containerImage not pinned by hash: Dockerfiles/agent-ot/Dockerfile:2
Warn: containerImage not pinned by hash: Dockerfiles/agent-ot/Dockerfile:4
Warn: containerImage not pinned by hash: Dockerfiles/agent-ot/Dockerfile.agent-otel:4
Warn: containerImage not pinned by hash: Dockerfiles/agent-ot/Dockerfile.agent-otel:82
Warn: containerImage not pinned by hash: Dockerfiles/agent/Dockerfile:3
Warn: containerImage not pinned by hash: Dockerfiles/agent/Dockerfile:29
Warn: containerImage not pinned by hash: Dockerfiles/agent/Dockerfile:39
Warn: containerImage not pinned by hash: Dockerfiles/agent/Dockerfile:97
Warn: containerImage not pinned by hash: Dockerfiles/agent/Dockerfile:236
Warn: containerImage not pinned by hash: Dockerfiles/agent/windows/amd64/Dockerfile:2
Warn: containerImage not pinned by hash: Dockerfiles/cluster-agent/Dockerfile:6
Warn: containerImage not pinned by hash: Dockerfiles/cluster-agent/Dockerfile:39
Warn: containerImage not pinned by hash: Dockerfiles/cluster-agent/Dockerfile:50
Warn: containerImage not pinned by hash: Dockerfiles/dogstatsd/alpine/Dockerfile:2
Warn: containerImage not pinned by hash: Dockerfiles/dogstatsd/socat-proxy/Dockerfile:1: pin your Docker image by updating alpine:3.12 to alpine:3.12@sha256:c75ac27b49326926b803b9ed43bf088bc220d22556de1bc5f72d742c91398f69
Warn: containerImage not pinned by hash: google-marketplace/Dockerfile:1
Warn: containerImage not pinned by hash: test/fakeintake/Dockerfile:5
Warn: containerImage not pinned by hash: test/fakeintake/Dockerfile:30: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Warn: containerImage not pinned by hash: test/integration/serverless/recorder-extension/Dockerfile.build:3
Warn: containerImage not pinned by hash: test/integration/serverless/recorder-extension/Dockerfile.build:29
Warn: containerImage not pinned by hash: test/integration/serverless_perf/Dockerfile:1: pin your Docker image by updating public.ecr.aws/lambda/nodejs:14 to public.ecr.aws/lambda/nodejs:14@sha256:91ad9a75925ac4566ccbee07f8f03e819204b0012cfbe7fe7366c06466b926d0
Warn: containerImage not pinned by hash: tools/ebpf/Dockerfiles/Dockerfile-process-agent-dev:2
Warn: containerImage not pinned by hash: tools/ebpf/Dockerfiles/Dockerfile-security-agent-dev:2
Warn: containerImage not pinned by hash: tools/gdb/Dockerfile:2
Warn: pipCommand not pinned by hash: Dockerfiles/agent-ot/Dockerfile.agent-otel:67-70
Warn: pipCommand not pinned by hash: Dockerfiles/agent-ot/Dockerfile.agent-otel:67-70
Warn: goCommand not pinned by hash: tools/gdb/Dockerfile:14
Warn: nugetCommand not pinned by hash: test/integration/serverless/build_csharp_functions.sh:5: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)
Warn: npmCommand not pinned by hash: test/integration/serverless/run.sh:244
Warn: pipCommand not pinned by hash: .github/workflows/assign_issue.yml:25
Warn: pipCommand not pinned by hash: .github/workflows/assign_issue.yml:25
Warn: pipCommand not pinned by hash: .github/workflows/buildimages-update.yml:76
Warn: pipCommand not pinned by hash: .github/workflows/bump_integrations_core.yml:32
Warn: pipCommand not pinned by hash: .github/workflows/bump_integrations_core.yml:33
Warn: pipCommand not pinned by hash: .github/workflows/bump_integrations_core.yml:34
Warn: pipCommand not pinned by hash: .github/workflows/bump_integrations_core.yml:35
Warn: pipCommand not pinned by hash: .github/workflows/chase_release_managers.yml:29
Warn: pipCommand not pinned by hash: .github/workflows/chase_release_managers.yml:30
Warn: pipCommand not pinned by hash: .github/workflows/code_review_complexity.yml:35
Warn: pipCommand not pinned by hash: .github/workflows/codeql-analysis.yml:37
Warn: pipCommand not pinned by hash: .github/workflows/collector-generate-and-update.yml:31
Warn: pipCommand not pinned by hash: .github/workflows/collector-generate-and-update.yml:32
Warn: pipCommand not pinned by hash: .github/workflows/create_rc_pr.yml:37
Warn: pipCommand not pinned by hash: .github/workflows/create_rc_pr.yml:38
Warn: pipCommand not pinned by hash: .github/workflows/create_rc_pr.yml:39
Warn: pipCommand not pinned by hash: .github/workflows/create_rc_pr.yml:40
Warn: pipCommand not pinned by hash: .github/workflows/create_rc_pr.yml:91
Warn: pipCommand not pinned by hash: .github/workflows/create_rc_pr.yml:92
Warn: pipCommand not pinned by hash: .github/workflows/create_rc_pr.yml:93
Warn: pipCommand not pinned by hash: .github/workflows/create_rc_pr.yml:94
Warn: pipCommand not pinned by hash: .github/workflows/create_release_schedule.yml:34
Warn: pipCommand not pinned by hash: .github/workflows/create_release_schedule.yml:35
Warn: pipCommand not pinned by hash: .github/workflows/cws-btfhub-sync.yml:69
Warn: pipCommand not pinned by hash: .github/workflows/cws-btfhub-sync.yml:110
Warn: pipCommand not pinned by hash: .github/workflows/docs-dev.yml:41
Warn: pipCommand not pinned by hash: .github/workflows/external-contributor.yml:33
Warn: pipCommand not pinned by hash: .github/workflows/go_mod_tidy.yml:28
Warn: pipCommand not pinned by hash: .github/workflows/label-analysis.yml:117
Warn: pipCommand not pinned by hash: .github/workflows/label-analysis.yml:139
Warn: pipCommand not pinned by hash: .github/workflows/label-analysis.yml:158
Warn: pipCommand not pinned by hash: .github/workflows/label-analysis.yml:37
Warn: pipCommand not pinned by hash: .github/workflows/label-analysis.yml:58
Warn: pipCommand not pinned by hash: .github/workflows/report-merged-pr.yml:36
Warn: goCommand not pinned by hash: .github/workflows/serverless-benchmarks.yml:112
Warn: goCommand not pinned by hash: .github/workflows/serverless-binary-size.yml:124
Warn: pipCommand not pinned by hash: .github/workflows/update_dependencies.yml:38
Warn: goCommand not pinned by hash: .github/workflows/update_dependencies.yml:40
Info: 86 out of 86 GitHub-owned GitHubAction dependencies pinned
Info: 16 out of 16 third-party GitHubAction dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned
Info: 0 out of 24 containerImage dependencies pinned
Info: 0 out of 37 pipCommand dependencies pinned
Info: 2 out of 6 goCommand dependencies pinned
Info: 0 out of 1 nugetCommand dependencies pinned