Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:247: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:265: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/BitBoxSwiss/bitbox-wallet-app/ci.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:14
Warn: containerImage not pinned by hash: Dockerfile:16: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: npmCommand not pinned by hash: scripts/ci.sh:31
Warn: downloadThenRun not pinned by hash: scripts/docker_install.sh:21
Warn: pipCommand not pinned by hash: scripts/docker_install.sh:75
Warn: pipCommand not pinned by hash: scripts/docker_install.sh:75
Warn: npmCommand not pinned by hash: scripts/docker_install.sh:82
Warn: npmCommand not pinned by hash: scripts/docker_install.sh:83
Warn: goCommand not pinned by hash: vendor/github.com/ethereum/go-ethereum/oss-fuzz.sh:64
Warn: goCommand not pinned by hash: vendor/github.com/ethereum/go-ethereum/oss-fuzz.sh:83
Warn: goCommand not pinned by hash: vendor/github.com/holiman/uint256/oss-fuzz.sh:53
Warn: goCommand not pinned by hash: vendor/github.com/holiman/uint256/oss-fuzz.sh:72
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:153
Info: 0 out of 22 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 0 out of 3 pipCommand dependencies pinned
Info: 0 out of 4 goCommand dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned
Info: 0 out of 3 npmCommand dependencies pinned