Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/atlas.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/atlas.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/atlas.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/atlas.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/atlas.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/atlas.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/atlas.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/atlas.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/atlas.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/atlas.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/atlas.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/atlas.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/atlas.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/atlas.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/atlas.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/atlas.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/atlas.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/atlas.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-docs.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/check-docs.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/clean-artifacts.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/clean-artifacts.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/docker.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/docker.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/docker.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/docker.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/janitor.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/janitor.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/labeler.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linkchecker.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/linkchecker.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/linkchecker.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/linkchecker.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-pr.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/lint-pr.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/lint.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/lint.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/lint.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/proto.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/proto.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/proto.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-sims.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/release-sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-sims.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/release-sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-sims.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/release-sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-sims.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/release-sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sims.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sims.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sims.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sims.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/sims.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/stale.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tag.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/tag.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tag.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/tag.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tag.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/tag.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tag.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/tag.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:248: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/scrtlabs/cosmos-sdk/test.yml/secret-0.45.x?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:13
Warn: containerImage not pinned by hash: Dockerfile:30: pin your Docker image by updating alpine:edge to alpine:edge@sha256:115729ec5cb049ba6359c3ab005ac742012d92bbaa5b8bc1a878f1e8f62c0cb8
Warn: containerImage not pinned by hash: contrib/devtools/dockerfile:1
Warn: containerImage not pinned by hash: contrib/devtools/dockerfile:3: pin your Docker image by updating golang:alpine to golang:alpine@sha256:5429efb7de864db15bd99b91b67608d52f97945837c7f6f7d1b779f9bfe46281
Warn: containerImage not pinned by hash: contrib/images/simd-dlv/Dockerfile:1
Warn: containerImage not pinned by hash: contrib/images/simd-dlv/Dockerfile:10
Warn: containerImage not pinned by hash: contrib/images/simd-env/Dockerfile:1
Warn: containerImage not pinned by hash: contrib/images/simd-env/Dockerfile:10
Warn: containerImage not pinned by hash: contrib/rosetta/node/Dockerfile:1
Warn: containerImage not pinned by hash: contrib/rosetta/node/Dockerfile:15: pin your Docker image by updating alpine to alpine@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Warn: containerImage not pinned by hash: contrib/rosetta/rosetta-cli/Dockerfile:1
Warn: containerImage not pinned by hash: contrib/rosetta/rosetta-cli/Dockerfile:13: pin your Docker image by updating alpine to alpine@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Warn: goCommand not pinned by hash: contrib/devtools/dockerfile:10-17
Warn: goCommand not pinned by hash: contrib/devtools/dockerfile:19
Warn: npmCommand not pinned by hash: contrib/devtools/dockerfile:25
Warn: goCommand not pinned by hash: contrib/images/simd-dlv/Dockerfile:3
Warn: goCommand not pinned by hash: scripts/protocgen-any.sh:9
Warn: goCommand not pinned by hash: scripts/protocgen.sh:11
Warn: npmCommand not pinned by hash: .github/workflows/check-docs.yml:24
Info: 0 out of 60 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 28 third-party GitHubAction dependencies pinned
Info: 0 out of 12 containerImage dependencies pinned
Info: 3 out of 8 goCommand dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned