Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/build.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/build_docker_images.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/build_docker_images.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_setup.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/build_setup.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_setup.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/build_setup.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cri_minio_test.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/cri_minio_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cri_minio_test.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/cri_minio_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cri_minio_test.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/cri_minio_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cri_stock_containerd_test.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/cri_stock_containerd_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cri_stock_containerd_test.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/cri_stock_containerd_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cri_tests.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/cri_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cri_tests.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/cri_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cri_tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/cri_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/integration_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/integration_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/integration_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/integration_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/linters.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/linters.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/linters.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/linters.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/linters.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/linters.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/linters.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/linters.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/nightly_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/nightly_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/nightly_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/nightly_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/nightly_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openyurt-unit-test.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/openyurt-unit-test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openyurt-unit-test.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/openyurt-unit-test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stargz_tests.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/stargz_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stargz_tests.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/stargz_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/unit_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/unit_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/unit_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/unit_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/unit_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/unit_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/unit_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/vhive-serverless/vHive/unit_tests.yml/main?enable=pin
Warn: containerImage not pinned by hash: configs/docker-images/golang-builder/Dockerfile:1
Warn: containerImage not pinned by hash: configs/docker-images/python-slim/Dockerfile:1
Warn: containerImage not pinned by hash: configs/docker-images/runner/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/chameleon/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/chameleon/Dockerfile:6
Warn: containerImage not pinned by hash: function-images/cnn_serving/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/grpc/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/grpc/Dockerfile:3
Warn: containerImage not pinned by hash: function-images/hello_gpu/Dockerfile:23: pin your Docker image by updating nvidia/cuda:12.1.1-base-ubuntu20.04 to nvidia/cuda:12.1.1-base-ubuntu20.04@sha256:fa864b7a8a26be267f39f1afc0294768121a3b658b986f560e754eff0216bef0
Warn: containerImage not pinned by hash: function-images/helloworld/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/helloworld/Dockerfile:6
Warn: containerImage not pinned by hash: function-images/image_rotate_s3/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/image_rotate_s3/Dockerfile:9
Warn: containerImage not pinned by hash: function-images/json_serdes_s3/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/json_serdes_s3/Dockerfile:6
Warn: containerImage not pinned by hash: function-images/lr_serving/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/lr_training_s3/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/pyaes/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/pyaes/Dockerfile:6
Warn: containerImage not pinned by hash: function-images/rnn_serving/Dockerfile:1
Warn: containerImage not pinned by hash: function-images/springboot/dockerfile:4
Warn: containerImage not pinned by hash: function-images/springboot/dockerfile:12: pin your Docker image by updating openjdk:11-jre-slim to openjdk:11-jre-slim@sha256:93af7df2308c5141a751c4830e6b6c5717db102b3b31f012ea29d842dc4f2b02
Warn: containerImage not pinned by hash: function-images/tests/save_load_minio/Dockerfile:23
Warn: containerImage not pinned by hash: function-images/video_processing_s3/Dockerfile:1
Warn: containerImage not pinned by hash: scripts/github_runner/Dockerfile.github_runner:23: pin your Docker image by updating ubuntu:focal to ubuntu:focal@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: pipCommand not pinned by hash: function-images/chameleon/Dockerfile:4
Warn: pipCommand not pinned by hash: function-images/cnn_serving/Dockerfile:5-24
Warn: pipCommand not pinned by hash: function-images/cnn_serving/Dockerfile:5-24
Warn: pipCommand not pinned by hash: function-images/cnn_serving/Dockerfile:5-24
Warn: pipCommand not pinned by hash: function-images/cnn_serving/Dockerfile:5-24
Warn: pipCommand not pinned by hash: function-images/grpc/Dockerfile:5-7
Warn: pipCommand not pinned by hash: function-images/helloworld/Dockerfile:4
Warn: pipCommand not pinned by hash: function-images/image_rotate_s3/Dockerfile:4-7
Warn: pipCommand not pinned by hash: function-images/json_serdes_s3/Dockerfile:4
Warn: pipCommand not pinned by hash: function-images/lr_serving/Dockerfile:9
Warn: pipCommand not pinned by hash: function-images/lr_training_s3/Dockerfile:3
Warn: pipCommand not pinned by hash: function-images/pyaes/Dockerfile:4
Warn: pipCommand not pinned by hash: function-images/rnn_serving/Dockerfile:5-8
Warn: pipCommand not pinned by hash: function-images/video_processing_s3/Dockerfile:4
Warn: pipCommand not pinned by hash: function-images/video_processing_s3/Dockerfile:4
Warn: pipCommand not pinned by hash: function-images/video_processing_s3/Dockerfile:4
Warn: pipCommand not pinned by hash: function-images/video_processing_s3/Dockerfile:4
Warn: pipCommand not pinned by hash: function-images/video_processing_s3/Dockerfile:4
Warn: downloadThenRun not pinned by hash: scripts/github_runner/setup_bare_metal_runner.sh:61
Warn: downloadThenRun not pinned by hash: .github/workflows/build.yml:53
Warn: npmCommand not pinned by hash: .github/workflows/linters.yml:31
Info: 0 out of 43 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 18 pipCommand dependencies pinned
Info: 0 out of 2 downloadThenRun dependencies pinned
Info: 1 out of 1 goCommand dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned
Info: 0 out of 25 containerImage dependencies pinned